CVE-2026-62132 | Medium | 5.3 | 2026-09-11 | Subscriber Broken Access Control in Masteriyo - LMS <= 3.4.0 versions. |
CVE-2026-62107 | High | 8.8 | 2026-09-11 | Unauthenticated PHP Object Injection in Masteriyo - LMS <= 3.4.0 versions. |
CVE-2026-8279 | Medium | 5.3 | 2026-09-07 | The Masteriyo LMS plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capability check on the 'delete_item_permissions_check' fun… |
CVE-2026-73996 | Critical | 9.8 | 2026-08-18 | Unauthenticated Arbitrary File Upload in Masteriyo - LMS <= 2.3.2 versions. |
CVE-2026-65463 | Medium | 5.4 | 2026-07-23 | Subscriber Insecure Direct Object References (IDOR) in Masteriyo - LMS <= 2.3.1 versions. |
CVE-2026-59513 | Medium | 6.5 | 2026-07-23 | Subscriber Cross Site Scripting (XSS) in Masteriyo - LMS <= 2.3.0 versions. |
CVE-2026-11773 | Medium | 4.3 | 2026-06-27 | The Masteriyo LMS – LMS Course Builder, Quizzes & Certificates plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including… |
CVE-2026-5167 | Medium | 5.3 | 2026-04-08 | The Masteriyo LMS – Online Course Builder for eLearning, LMS & Education plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key… |
CVE-2026-4484 | High | 8.8 | 2026-03-26 | The Masteriyo LMS plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.1.6. This is due to the plugin allowing a… |
CVE-2025-64270 | Medium | 6.5 | 2025-12-18 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in masteriyo Masteriyo - LMS learning-management-system allows Retriev… |
CVE-2025-54699 | Medium | 6.5 | 2025-08-14 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in masteriyo Masteriyo - LMS learning-management-system allo… |
CVE-2024-33939 | Medium | 5.3 | 2025-05-19 | Authentication Bypass Using an Alternate Path or Channel vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - L… |
CVE-2024-43159 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.11.6. |
CVE-2024-43158 | High | 7.5 | 2024-11-01 | Missing Authorization vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.11.4. |
CVE-2024-10008 | High | 8.8 | 2024-10-29 | The Masteriyo LMS – eLearning and Online Course Builder for WordPress plugin for WordPress is vulnerable to unauthorized user profile modification due to missi… |
CVE-2024-10000 | Medium | 6.4 | 2024-10-29 | The Masteriyo LMS – eLearning and Online Course Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the question's cont… |
CVE-2024-43239 | Medium | 4.3 | 2024-08-18 | Authorization Bypass Through User-Controlled Key vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from… |
CVE-2024-24882 | Critical | 9.8 | 2024-05-17 | Incorrect Privilege Assignment vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1… |