Skip to content
OpenAdvisories

Vendor

stylemix

92 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2024-1512 Public exploit Scanner template EPSS 78%

    MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.5 - Unauthenticated SQL Injection

    The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to union based SQL Injection via the 'user' parameter of the /lms/stm-lms/order/items REST route in all versions up to, and including, 3.2.5 due to insu…