Skip to contentStylemix Masterstudy Lms Wordpress Plugin – For Online Courses And Education vulnerabilities
- stylemix masterstudy lms wordpress plugin – for online courses and educationMasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.14 - Insecure Direct Object Reference to Authenticated (Instructor+) Arbitrary Attachment DeletionCVE-2026-50606.5 Medium
- stylemix masterstudy lms wordpress plugin – for online courses and educationMasterStudy LMS <= 3.7.25 - Authenticated (Subscriber+) Time-based Blind SQL Injection via 'order' and 'orderby' ParametersCVE-2026-48176.5 Medium
- stylemix masterstudy lms wordpress plugin – for online courses and educationMasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'stm_lms_courses_grid_display' ShortcodeCVE-2026-05596.4 Medium
- stylemix masterstudy lms wordpress plugin – for online courses and educationMasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.6 Missing Authorization to Authenticated (Subscriber+) Posts and Media Creation, Modification and DeletionCVE-2025-137665.4 Medium
- stylemix masterstudy lms wordpress plugin – for online courses and education, stylemixthemes masterstudy lms +1 moreMasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.3.8 - Missing AuthorizationCVE-2024-39426.3 Medium
- stylemixthemes masterstudy lms, stylemix masterstudy lms wordpress plugin – for online courses and education +1 moreMasterStudy LMS <= 3.3.3 - Unauthenticated Local File Inclusion via templateCVE-2024-31369.8 Critical
- stylemixthemes masterstudy lms, stylemix masterstudy lms wordpress plugin – for online courses and education +1 moreMasterStudy LMS <= 3.2.13 - Missing Authorization to Sensitive Information Exposure in search_postsCVE-2024-19044.3 Medium
- stylemixthemes masterstudy lms, stylemix masterstudy lms wordpress plugin – for online courses and education +1 moreMasterStudy LMS <= 3.3.0 - Unauthenticated Local File Inclusion via modalCVE-2024-24119.8 Critical
- stylemixthemes masterstudy lms, stylemix masterstudy lms wordpress plugin – for online courses and education +1 moreMasterStudy LMS <= 3.3.1 - Unauthenticated Privilege Escalation via stm_lms_register AJAX ActionCVE-2024-24099.8 Critical
- stylemix masterstudy lms wordpress plugin – for online courses and education, stylemixthemes masterstudy lms +1 moreMasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.10 - Basic Information Exposure via REST routeCVE-2024-21065.3 Medium
- stylemix masterstudy lms wordpress plugin – for online courses and education, stylemixthemes masterstudy lms +1 moreMasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.5 - Unauthenticated SQL InjectionCVE-2024-1512Public exploitEPSS 77.7%9.8 Critical
- stylemix masterstudy lms wordpress plugin – for online courses and education, stylemixthemes masterstudy lms +1 moreWordPress MasterStudy LMS Plugin <= 3.0.8 is vulnerable to Broken Access ControlCVE-2023-350936.5 Medium
- stylemix masterstudy lms wordpress plugin – for online courses and education, stylemixthemes masterstudy lms +1 moreWordPress MasterStudy LMS Plugin <= 3.0.8 is vulnerable to Cross Site Scripting (XSS)CVE-2023-350906.5 Medium