PULSE
EN VIVO90señales / 24h
EN
FEED
ransomshinyhunters reclama a RingCentral, Inc. · US · Technologyransomshinyhunters reclama a Ernst & Young · US · Professional Servicesransomqilin reclama a Savills France · FR · Professional Servicesransomqilin reclama a Wilbert's · US · Retail & E-Commerceransomdragonforce reclama a Katathani Phuket Beach Resort · TH · Hospitalityransomcrpxo reclama a IPTV Platform · US · Technology · 3.2 GBransomcrpxo reclama a Marketech · US · Technology · 6.7 GBransomcrpxo reclama a American Hospice & Home Health Services (Ahhh Care) · US · Healthcare · 11.3 GBransomcrpxo reclama a Bright Star Partners Insurance · US · Financial Services · 41.8 GBransomcrpxo reclama a eCare Platform · US · Healthcare · 14.2 GBransomcrpxo reclama a Dignity Phoenix · US · Healthcare · 5.4 GBransomcrpxo reclama a Schorr Law · US · Professional Services · 27.6 GBransomcrpxo reclama a Simpkins Law Firm · US · Professional Services · 31.2 GBransomcrpxo reclama a Leah Walker Orthodontics · US · Healthcare · 8.3 GBransomshinyhunters reclama a RingCentral, Inc. · US · Technologyransomshinyhunters reclama a Ernst & Young · US · Professional Servicesransomqilin reclama a Savills France · FR · Professional Servicesransomqilin reclama a Wilbert's · US · Retail & E-Commerceransomdragonforce reclama a Katathani Phuket Beach Resort · TH · Hospitalityransomcrpxo reclama a IPTV Platform · US · Technology · 3.2 GBransomcrpxo reclama a Marketech · US · Technology · 6.7 GBransomcrpxo reclama a American Hospice & Home Health Services (Ahhh Care) · US · Healthcare · 11.3 GBransomcrpxo reclama a Bright Star Partners Insurance · US · Financial Services · 41.8 GBransomcrpxo reclama a eCare Platform · US · Healthcare · 14.2 GBransomcrpxo reclama a Dignity Phoenix · US · Healthcare · 5.4 GBransomcrpxo reclama a Schorr Law · US · Professional Services · 27.6 GBransomcrpxo reclama a Simpkins Law Firm · US · Professional Services · 31.2 GBransomcrpxo reclama a Leah Walker Orthodontics · US · Healthcare · 8.3 GB
← Todos los CVEs
CVE Watch27 jul 2026

CVE-2026-13332

The Masteriyo LMS WordPress plugin before 2.3.1 does not correctly verify authorization on an unauthenticated AJAX action used to clear use

CVSS

—

Sin CVSS

EPSS

—

KEV

—

Exploit Today

0

0-100

Publicado: 27 jul 2026 · Última mod.: 27 jul 2026

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

The Masteriyo LMS WordPress plugin before 2.3.1 does not correctly verify authorization on an unauthenticated AJAX action used to clear user sessions, allowing unauthenticated attackers to terminate the active sessions (force-logout) of any user on the site, including administrators.

Referencias oficiales
CVEs relacionados

Sin CVEs relacionados por CWE o producto.