Skip to content
OpenAdvisories

Vendor

masteriyo

18 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-4484 Public exploit

    Masteriyo LMS <= 2.1.6 - Missing Authorization to Authenticated (Student+) Privilege Escalation to Administrator

    The Masteriyo LMS plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.1.6. This is due to the plugin allowing a user to update the user role through the 'InstructorsController::prepare_object_for_database' functi…