Stylemixthemes Masterstudy vulnerabilities

• stylemix masterstudy lms WordPress MasterStudy LMS plugin <= 3.7.56 - Content Injection vulnerability CVE-2026-119478 4.3 MediumNovember 7, 2026
• stylemix masterstudy lms WordPress MasterStudy LMS plugin <= 3.7.55 - Broken Access Control vulnerability CVE-2026-118092 4.3 MediumOctober 29, 2026
• stylemix masterstudy lms WordPress MasterStudy LMS plugin <= 3.7.52 - Cross Site Scripting (XSS) vulnerability CVE-2026-105079 6.5 MediumOctober 8, 2026
• stylemix masterstudy lms WordPress MasterStudy LMS plugin <= 3.7.39 - Broken Access Control vulnerability CVE-2026-28145 5.3 MediumJuly 31, 2026
• stylemix masterstudy lms WordPress MasterStudy LMS plugin <= 3.7.25 - SQL Injection vulnerability CVE-2026-40766 8.5 HighJune 15, 2026
• stylemixthemes masterstudy lms pro WordPress MasterStudy LMS Pro plugin < 4.7.16 - Broken Access Control vulnerability CVE-2025-64215 6.5 MediumJune 15, 2026
• stylemixthemes masterstudy lms pro MasterStudy LMS Pro Plus <= 4.8.20 - Authenticated (Instructor+) SQL Injection via 'columns' Parameter CVE-2026-8653 6.5 MediumJune 4, 2026
• stylemixthemes masterstudy lms pro WordPress MasterStudy LMS Pro plugin < 4.7.16 - Arbitrary Content Deletion vulnerability CVE-2025-64214 7.5 HighDecember 18, 2025
• stylemixthemes masterstudy lms pro WordPress MasterStudy LMS Pro plugin < 4.7.16 - Sensitive Data Exposure vulnerability CVE-2025-64213 7.5 HighDecember 18, 2025
• stylemixthemes masterstudy WordPress Masterstudy theme < 4.8.122 - Broken Access Control vulnerability CVE-2025-64209 7.5 HighDecember 18, 2025
• stylemixthemes masterstudy WordPress Masterstudy theme < 4.8.126 - Local File Inclusion vulnerability CVE-2025-64364 7.5 HighOctober 31, 2025
• stylemixthemes masterstudy lms pro WordPress MasterStudy LMS Pro plugin < 4.7.16 - Broken Access Control vulnerability CVE-2025-64212 5.4 MediumOctober 29, 2025
• stylemixthemes masterstudy elementor widgets WordPress Masterstudy Elementor Widgets plugin <= 1.2.4 - Broken Access Control vulnerability CVE-2025-64211 5.3 MediumOctober 29, 2025
• stylemixthemes masterstudy elementor widgets WordPress Masterstudy Elementor Widgets plugin <= 1.2.4 - Broken Access Control vulnerability CVE-2025-64210 5.4 MediumOctober 29, 2025
• stylemixthemes masterstudy lms pro MasterStudy LMS – Online Courses, eLearning PRO Plus <= 4.7.9 - Authenticated (Subscriber+) Arbitrary File Upload CVE-2025-7438 7.5 HighJuly 18, 2025
• stylemixthemes masterstudy lms pro MasterStudy LMS Pro <= 4.7.0 - Authenticated (Subscriber+) Arbitrary File Upload CVE-2025-4800 8.8 HighMay 28, 2025
• stylemix masterstudy lms WordPress MasterStudy LMS plugin <= 3.2.1 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-37093 4.3 MediumJanuary 2, 2025
• stylemixthemes masterstudy elementor widgets WordPress Masterstudy Elementor Widgets plugin <= 1.2.2 - Unauthenticated Broken Access Control vulnerability CVE-2024-37269 5.3 MediumNovember 1, 2024
• stylemix masterstudy lms WordPress MasterStudy LMS plugin <= 3.2.12 - Broken Access Control vulnerability CVE-2024-37094 8.2 HighNovember 1, 2024
• stylemixthemes masterstudy lms starter, masterstudy lms +1 more WordPress Masterstudy LMS Starter theme <= 1.1.8 - Sensitive Data Exposure vulnerability CVE-2024-43990 5.3 MediumSeptember 25, 2024
• masterstudy lms wordpress plugin lms wordpress plugin, stylemixthemes masterstudy lms, unknown masterstudy lms wordpress plugin +2 more MasterStudy LMS < 3.3.24 - Privilege Escalation to Instructor CVE-2024-5973 8.8 HighJuly 22, 2024
• stylemixthemes consulting elementor widgets, masterstudy elementor widgets +1 more SQL Injection vulnerability in multiple StylemixThemes premium themes CVE-2024-37090 8.5 HighJuly 9, 2024
• stylemixthemes consulting elementor widgets, masterstudy elementor widgets +1 more WordPress Consulting Elementor Widgets plugin <= 1.3.0 - Remote Code Execution (RCE) vulnerability CVE-2024-37091 9.9 CriticalJune 24, 2024
• stylemix masterstudy lms wordpress plugin – for online courses and education, stylemixthemes masterstudy lms +1 more MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.3.8 - Missing Authorization CVE-2024-3942 6.3 MediumMay 2, 2024
• stylemixthemes masterstudy lms, stylemix masterstudy lms wordpress plugin – for online courses and education +1 more MasterStudy LMS <= 3.3.3 - Unauthenticated Local File Inclusion via template CVE-2024-3136 9.8 CriticalApril 9, 2024
• stylemixthemes masterstudy lms, stylemix masterstudy lms wordpress plugin – for online courses and education +1 more MasterStudy LMS <= 3.2.13 - Missing Authorization to Sensitive Information Exposure in search_posts CVE-2024-1904 4.3 MediumApril 9, 2024
• stylemixthemes masterstudy lms, stylemix masterstudy lms wordpress plugin – for online courses and education +1 more MasterStudy LMS <= 3.3.0 - Unauthenticated Local File Inclusion via modal CVE-2024-2411 9.8 CriticalMarch 29, 2024
• stylemixthemes masterstudy lms, stylemix masterstudy lms wordpress plugin – for online courses and education +1 more MasterStudy LMS <= 3.3.1 - Unauthenticated Privilege Escalation via stm_lms_register AJAX Action CVE-2024-2409 9.8 CriticalMarch 29, 2024
• stylemix masterstudy lms wordpress plugin – for online courses and education, stylemixthemes masterstudy lms +1 more MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.10 - Basic Information Exposure via REST route CVE-2024-2106 5.3 MediumMarch 13, 2024
• stylemix masterstudy lms wordpress plugin – for online courses and education, stylemixthemes masterstudy lms +1 more MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.5 - Unauthenticated SQL Injection CVE-2024-1512 Public exploit EPSS 77.7% 9.8 CriticalFebruary 17, 2024
• stylemixthemes masterstudy lms, unknown masterstudy lms wordpress plugin +1 more MasterStudy LMS < 3.0.18 - Unauthenticated Instructor Account Creation CVE-2023-4278 Public exploit 7.5 HighSeptember 11, 2023
• stylemix masterstudy lms wordpress plugin – for online courses and education, stylemixthemes masterstudy lms +1 more WordPress MasterStudy LMS Plugin <= 3.0.8 is vulnerable to Broken Access Control CVE-2023-35093 6.5 MediumJune 22, 2023
• stylemix masterstudy lms wordpress plugin – for online courses and education, stylemixthemes masterstudy lms +1 more WordPress MasterStudy LMS Plugin <= 3.0.8 is vulnerable to Cross Site Scripting (XSS) CVE-2023-35090 6.5 MediumJune 22, 2023
• stylemixthemes masterstudy lms, unknown masterstudy lms – wordpress lms plugin +1 more MasterStudy LMS < 2.7.6 - Unauthenticated Admin Account Creation CVE-2022-0441 Public exploit EPSS 85.3% 9.8 CriticalMarch 7, 2022