Vulnerability · Published Sep 22, 2025 · Assigned by Patchstack

CVE-2025-59577WordPress MasterStudy LMS Plugin <= 3.6.20 - Race Condition Vulnerability

Medium 4.3

In plain English

A medium-severity race condition in MasterStudy LMS from Stylemix. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 12% of all known vulnerabilities).

Severity (CVSS 3.1)4.3Medium
Exploit odds (30 days)0.2%top 88.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows Leveraging Race Conditions.This issue affects MasterStudy LMS: from n/a through <= 3.6.20.

Affected products (as reported)

VendorProductVersions
Stylemix MasterStudy LMS 0 – through 3.6.20

Weakness: CWE-362 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

References