Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-64270 EUVD-2025-204065GHSA-f8gr-377p-fqrf

WordPress Masteriyo - LMS plugin <= 2.0.3 - Sensitive Data Exposure vulnerability

Published Dec 18, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in masteriyo Masteriyo - LMS learning-management-system allows Retrieve Embedded Sensitive Data.This issue affects Masteriyo - LMS: from n/a through <= 2.0.3.

Affected products

VendorProductAffectedFixed
masteriyo Masteriyo - LMS ≤ 2.0.3 —

References