Skip to content
OpenAdvisories

Vendor

masteriyo

18 known vulnerabilities.

Products

Masteriyo - LMS 12 Masteriyo LMS – Online Course Builder for eLearning, LMS & Education 4 Masteriyo LMS – LMS Course Builder, Quizzes & Certificates 2
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.8
    CVE-2026-62107

    WordPress Masteriyo - LMS plugin <= 3.4.0 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Masteriyo - LMS <= 3.4.0 versions.

    masteriyo Masteriyo - LMS
  • High 8.8
    CVE-2026-4484 Public exploit

    Masteriyo LMS <= 2.1.6 - Missing Authorization to Authenticated (Student+) Privilege Escalation to Administrator

    The Masteriyo LMS plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.1.6. This is due to the plugin allowing a user to update the user role through the 'InstructorsController::prepare_object_for_database' functi…

    masteriyo Masteriyo LMS – Online Course Builder for eLearning, LMS & Education Web / CMS
  • High 7.5
    CVE-2024-43158

    WordPress Masteriyo LMS plugin <= 1.11.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.11.4.

    masteriyo Masteriyo - LMS
  • High 8.8
    CVE-2024-10008

    Masteriyo LMS – eLearning and Online Course Builder for WordPress <= 1.13.3 - Authenticated (Student+) Missing Authorization to Privilege Escalation

    The Masteriyo LMS – eLearning and Online Course Builder for WordPress plugin for WordPress is vulnerable to unauthorized user profile modification due to missing authorization checks on the /wp-json/masteriyo/v1/users/$id REST API endpoint in all versions up …

    masteriyo Masteriyo LMS – Online Course Builder for eLearning, LMS & Education Web / CMS