Masteriyo

11 CVEs across 4 Masteriyo products. Browse Masteriyo vulnerabilities, severities, and proof-of-concept exploits.

Masteriyo products with known CVEs

ProductCVEs
Masteriyo - Lms9
Masteriyo5
Masteriyo Lms – Online Course Builder For Elearning, Lms & Education4
Masteriyo Lms – Lms Course Builder, Quizzes & Certificates1
Masteriyo CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-65463Medium5.42026-07-23Subscriber Insecure Direct Object References (IDOR) in Masteriyo - LMS <= 2.3.1 versions.
CVE-2026-59513Medium6.52026-07-23Subscriber Cross Site Scripting (XSS) in Masteriyo - LMS <= 2.3.0 versions.
CVE-2026-11773Medium4.32026-06-27The Masteriyo LMS – LMS Course Builder, Quizzes & Certificates plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including…
CVE-2026-5167Medium5.32026-04-08The Masteriyo LMS – Online Course Builder for eLearning, LMS & Education plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key…
CVE-2026-4484High8.82026-03-26The Masteriyo LMS plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.1.6. This is due to the plugin allowing a…
CVE-2025-64270Medium6.52025-12-18Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in masteriyo Masteriyo - LMS learning-management-system allows Retriev…
CVE-2025-54699Medium6.52025-08-14Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in masteriyo Masteriyo - LMS learning-management-system allo…
CVE-2024-33939Medium5.32025-05-19Authentication Bypass Using an Alternate Path or Channel vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - L…
CVE-2024-43159Medium5.32024-11-01Missing Authorization vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.11.6.
CVE-2024-43158High7.52024-11-01Missing Authorization vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.11.4.
CVE-2024-10008High8.82024-10-29The Masteriyo LMS – eLearning and Online Course Builder for WordPress plugin for WordPress is vulnerable to unauthorized user profile modification due to missi…
CVE-2024-10000Medium6.42024-10-29The Masteriyo LMS – eLearning and Online Course Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the question's cont…
CVE-2024-43239Medium4.32024-08-18Authorization Bypass Through User-Controlled Key vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from…
CVE-2024-24882Critical9.82024-05-17Incorrect Privilege Assignment vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1…