Description
Unauthenticated Broken Access Control in Masteriyo - LMS <= 2.1.5 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ThemeGrill | Masteriyo - LMS | ≤ 2.1.5 | — |
High · 7.5
CVE-2026-39524
EUVD-2026-36957GHSA-w265-826q-pq4h
WordPress Masteriyo - LMS plugin <= 2.1.5 - Payment Bypass vulnerability
Published Jun 15, 2026 · Updated Jun 16, 2026 · Assigned by Patchstack