Nakata Christian

**Name of the Vulnerable Software and Affected Versions** Masteriyo LMS WordPress plugin versions prior to 2.3.1 **Description** An issue exists where the software fails to correctly verify authorization on an unauthenticated AJAX action used to clear user sessions. This allows unauthenticated attackers to terminate the active sessions, resulting in a force-logout of any user on the site, including administrators. **Recommendations** Update the Masteriyo LMS WordPress plugin to version 2.3.1 or later.