PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-42743 ThemeGrill CVE debrief

CVE-2026-42743 is a MEDIUM severity vulnerability (CVSS Score: 6.5) affecting Masteriyo - LMS plugin versions up to 2.1.8. The vulnerability is caused by unauthenticated broken authentication. The CVE was published on 2026-06-15T21:16:57.117Z and last modified on 2026-06-15T21:24:32.790Z.

Vendor
ThemeGrill
Product
Masteriyo - LMS
CVSS
MEDIUM 6.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-15
Original CVE updated
2026-06-15
Advisory published
2026-06-15
Advisory updated
2026-06-15

Who should care

Users of Masteriyo - LMS plugin versions up to 2.1.8 should apply patches or mitigations to prevent exploitation of this vulnerability.

Technical summary

The vulnerability has a CVSS vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N and is classified under CWE-347. It was reported by [email protected].

Defensive priority

MEDIUM

Recommended defensive actions

  • Apply patches or updates to Masteriyo - LMS plugin to version above 2.1.8.
  • Review and implement secure authentication mechanisms.

Evidence notes

Evidence suggests that the vulnerability was reported by Patchstack (reference_domain_candidate).

Official resources

CVE-2026-42743 was published on 2026-06-15T21:16:57.117Z and last modified on 2026-06-15T21:24:32.790Z.