Skip to content
OpenAdvisories

Product · masteriyo

Masteriyo - LMS

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-116410

    WordPress Masteriyo - LMS plugin <= 3.4.3 - Arbitrary Content Deletion vulnerability

    Unauthenticated Arbitrary Content Deletion in Masteriyo - LMS <= 3.4.3 versions.

    masteriyo Masteriyo - LMS
  • Medium 5.3
    CVE-2026-62132

    WordPress Masteriyo - LMS plugin <= 3.4.0 - Broken Access Control vulnerability

    Subscriber Broken Access Control in Masteriyo - LMS <= 3.4.0 versions.

    masteriyo Masteriyo - LMS
  • Medium 5.4
    CVE-2026-65463

    WordPress Masteriyo - LMS plugin <= 2.3.1 - Insecure Direct Object References (IDOR) vulnerability

    Subscriber Insecure Direct Object References (IDOR) in Masteriyo - LMS <= 2.3.1 versions.

    masteriyo Masteriyo - LMS
  • Medium 6.5
    CVE-2026-59513

    WordPress Masteriyo - LMS plugin <= 2.3.0 - Cross Site Scripting (XSS) vulnerability

    Subscriber Cross Site Scripting (XSS) in Masteriyo - LMS <= 2.3.0 versions.

    masteriyo Masteriyo - LMS
  • Medium 6.5
    CVE-2025-64270

    WordPress Masteriyo - LMS plugin <= 2.0.3 - Sensitive Data Exposure vulnerability

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in masteriyo Masteriyo - LMS learning-management-system allows Retrieve Embedded Sensitive Data.This issue affects Masteriyo - LMS: from n/a through <= 2.0.3.

    masteriyo Masteriyo - LMS
  • Medium 6.5
    CVE-2025-54699

    WordPress Masteriyo - LMS Plugin plugin <= 1.18.3 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in masteriyo Masteriyo - LMS learning-management-system allows Stored XSS.This issue affects Masteriyo - LMS: from n/a through <= 1.18.3.

    masteriyo Masteriyo - LMS
  • Medium 5.3
    CVE-2024-33939 Scanner template

    WordPress LMS by Masteriyo plugin <= 1.7.3 - Broken Authentication vulnerability

    Authentication Bypass Using an Alternate Path or Channel vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.7.3.

    masteriyo Masteriyo - LMS
  • Medium 5.3
    CVE-2024-43159

    WordPress Masteriyo LMS plugin <= 1.11.6 - Broken Access Control vulnerability

    Missing Authorization vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.11.6.

    masteriyo Masteriyo - LMS
  • Medium 4.3
    CVE-2024-43239

    WordPress Masteriyo LMS plugin <= 1.11.4 - Insecure Direct Object Reference (IDOR) vulnerability

    Authorization Bypass Through User-Controlled Key vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.11.4.

    masteriyo Masteriyo - LMS