CVE-2026-11773

Name of the Vulnerable Software and Affected Versions Masteriyo LMS – LMS Course Builder, Quizzes & Certificates versions prior to 2.2.2

Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. This allows authenticated attackers with student-level access or higher to modify the post content (description) of arbitrary course announcements created by instructors or administrators.

Recommendations Update Masteriyo LMS – LMS Course Builder, Quizzes & Certificates to version 2.2.2 or later.