Skip to content

Masteriyo vulnerabilities

Products

Newest

masteriyo - lms WordPress Masteriyo - LMS plugin <= 3.4.3 - Arbitrary Content Deletion vulnerability CVE-2026-116410 6.5 MediumOctober 30, 2026
masteriyo - lms WordPress Masteriyo - LMS plugin <= 3.4.0 - Broken Access Control vulnerability CVE-2026-62132 5.3 MediumSeptember 11, 2026
masteriyo - lms WordPress Masteriyo - LMS plugin <= 3.4.0 - PHP Object Injection vulnerability CVE-2026-62107 8.8 HighSeptember 11, 2026
masteriyo lms – lms course builder, quizzes & certificates Masteriyo LMS <= 2.2.0 - Missing Authorization to Unauthenticated Arbitrary Course Progress Deletion CVE-2026-8279 5.3 MediumSeptember 7, 2026
masteriyo - lms, themegrill masteriyo - lms +1 more WordPress Masteriyo - LMS plugin <= 2.3.2 - Arbitrary File Upload vulnerability CVE-2026-73996 9.8 CriticalAugust 18, 2026
masteriyo - lms WordPress Masteriyo - LMS plugin <= 2.3.1 - Insecure Direct Object References (IDOR) vulnerability CVE-2026-65463 5.4 MediumJuly 23, 2026
masteriyo - lms WordPress Masteriyo - LMS plugin <= 2.3.0 - Cross Site Scripting (XSS) vulnerability CVE-2026-59513 6.5 MediumJuly 23, 2026
masteriyo lms – lms course builder, quizzes & certificates Masteriyo LMS <= 2.2.1 - Missing Authorization to Authenticated (Student+) Arbitrary Course Announcement Modification CVE-2026-11773 4.3 MediumJune 27, 2026
masteriyo - lms, themegrill masteriyo - lms +1 more WordPress Masteriyo - LMS plugin <= 2.1.8 - Broken Authentication vulnerability CVE-2026-42743 6.5 MediumJune 15, 2026
masteriyo - lms, themegrill masteriyo - lms +1 more WordPress Masteriyo - LMS plugin <= 2.1.5 - Payment Bypass vulnerability CVE-2026-39524 7.5 HighJune 15, 2026
masteriyo - lms, themegrill masteriyo - lms +1 more WordPress Masteriyo - LMS plugin <= 2.2.0 - Privilege Escalation vulnerability CVE-2026-49111 8.8 HighJune 15, 2026
masteriyo lms – online course builder for elearning, lms & education Masteriyo LMS <= 2.1.7 - Unauthenticated Authorization Bypass to Arbitrary Order Completion via Stripe Webhook Endpoint CVE-2026-5167 5.3 MediumApril 8, 2026
masteriyo lms – online course builder for elearning, lms & education Masteriyo LMS <= 2.1.6 - Missing Authorization to Authenticated (Student+) Privilege Escalation to Administrator CVE-2026-4484 Public exploit 8.8 HighMarch 26, 2026
masteriyo - lms WordPress Masteriyo - LMS plugin <= 2.0.3 - Sensitive Data Exposure vulnerability CVE-2025-64270 6.5 MediumDecember 18, 2025
masteriyo - lms WordPress Masteriyo - LMS Plugin plugin <= 1.18.3 - Cross Site Scripting (XSS) Vulnerability CVE-2025-54699 6.5 MediumAugust 14, 2025
masteriyo - lms, themegrill masteriyo +1 more WordPress LMS by Masteriyo plugin <= 1.7.3 - Broken Authentication vulnerability CVE-2024-33939 5.3 MediumMay 19, 2025
masteriyo, masteriyo - lms +1 more WordPress Masteriyo LMS plugin <= 1.11.4 - Broken Access Control vulnerability CVE-2024-43158 7.5 HighNovember 1, 2024
masteriyo, masteriyo - lms +1 more WordPress Masteriyo LMS plugin <= 1.11.6 - Broken Access Control vulnerability CVE-2024-43159 5.3 MediumNovember 1, 2024
masteriyo, masteriyo lms – online course builder for elearning, lms & education +1 more Masteriyo LMS – eLearning and Online Course Builder for WordPress <= 1.13.3 - Authenticated (Student+) Stored Cross-Site Scripting via Ask a Question Functionality CVE-2024-10000 6.4 MediumOctober 29, 2024
masteriyo, masteriyo lms – online course builder for elearning, lms & education +1 more Masteriyo LMS – eLearning and Online Course Builder for WordPress <= 1.13.3 - Authenticated (Student+) Missing Authorization to Privilege Escalation CVE-2024-10008 8.8 HighOctober 29, 2024
masteriyo, masteriyo - lms +1 more WordPress Masteriyo LMS plugin <= 1.11.4 - Insecure Direct Object Reference (IDOR) vulnerability CVE-2024-43239 4.3 MediumAugust 18, 2024
masteriyo, masteriyo - lms +1 more WordPress LMS by Masteriyo plugin <= 1.7.2 - Privilege Escalation vulnerability CVE-2024-24882 9.8 CriticalMay 17, 2024