SZB-c458bcf473
EUVD lists unauthenticated content deletion in Masteriyo LMS 3.4.3 and earlier
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- masteriyo
- Product
- Masteriyo - LMS
- First seen
Summary
The EU Vulnerability Database entry EUVD-2026-114306, as relayed in a Mastodon post, describes an unauthenticated flaw allowing arbitrary content deletion in Masteriyo - LMS versions up to 3.4.3. The entry gives a CVSS v3.1 score of 6.5 and was last updated 2026-10-30.
If you use masteriyo
Update Masteriyo - LMS to a version later than 3.4.3 if one is available
Back up course and lesson content before applying updates
Check recent content changes for unexpected deletions
What the sources say 1
· Mastodon: “Unauthenticated Arbitrary Content Deletion in Masteriyo - LMS <= 3.4.3 versions.” Source