Log in Start free

masteriyo

Products

ProductCVEsExploitedLatest
Masteriyo - LMS12–Oct 30, 2026
Masteriyo LMS – Online Course Builder for eLearning, LMS & Education4–Apr 8, 2026
Masteriyo LMS – LMS Course Builder, Quizzes & Certificates2–Sep 7, 2026

Exploited and recent CVEs

  • CVE-2026-116410 Medium 6.5 WordPress Masteriyo - LMS plugin <= 3.4.3 - Arbitrary Content Deletion vulnerability 0.2%
  • CVE-2026-62132 Medium 5.3 WordPress Masteriyo - LMS plugin <= 3.4.0 - Broken Access Control vulnerability 0.3%
  • CVE-2026-62107 High 8.8 WordPress Masteriyo - LMS plugin <= 3.4.0 - PHP Object Injection vulnerability 0.5%
  • CVE-2026-8279 Medium 5.3 Masteriyo LMS <= 2.2.0 - Missing Authorization to Unauthenticated Arbitrary Course Progress Deletion 0.4%
  • CVE-2026-65463 Medium 5.4 WordPress Masteriyo - LMS plugin <= 2.3.1 - Insecure Direct Object References (IDOR) vulnerability 0.3%
  • CVE-2026-59513 Medium 6.5 WordPress Masteriyo - LMS plugin <= 2.3.0 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-11773 Medium 4.3 Masteriyo LMS <= 2.2.1 - Missing Authorization to Authenticated (Student+) Arbitrary Course Announcement Modification 0.2%
  • CVE-2026-5167 Medium 5.3 Masteriyo LMS <= 2.1.7 - Unauthenticated Authorization Bypass to Arbitrary Order Completion via Stripe Webhook Endpoint 0.4%
  • CVE-2026-4484 High 8.8 Masteriyo LMS <= 2.1.6 - Missing Authorization to Authenticated (Student+) Privilege Escalation to Administrator 0.4%
  • CVE-2025-64270 Medium 6.5 WordPress Masteriyo - LMS plugin <= 2.0.3 - Sensitive Data Exposure vulnerability 0.3%
  • CVE-2025-54699 Medium 6.5 WordPress Masteriyo - LMS Plugin plugin <= 1.18.3 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2024-33939 Medium 5.3 WordPress LMS by Masteriyo plugin <= 1.7.3 - Broken Authentication vulnerability 0.9%
  • CVE-2024-43158 High 7.5 WordPress Masteriyo LMS plugin <= 1.11.4 - Broken Access Control vulnerability 0.5%
  • CVE-2024-43159 Medium 5.3 WordPress Masteriyo LMS plugin <= 1.11.6 - Broken Access Control vulnerability 0.4%
  • CVE-2024-10000 Medium 6.4 Masteriyo LMS – eLearning and Online Course Builder for WordPress <= 1.13.3 - Authenticated (Student+) Stored Cross-Site Scripting via Ask a Question Functionality 0.3%
  • CVE-2024-10008 High 8.8 Masteriyo LMS – eLearning and Online Course Builder for WordPress <= 1.13.3 - Authenticated (Student+) Missing Authorization to Privilege Escalation 0.6%
  • CVE-2024-43239 Medium 4.3 WordPress Masteriyo LMS plugin <= 1.11.4 - Insecure Direct Object Reference (IDOR) vulnerability 0.3%
  • CVE-2024-24882 Critical 9.8 WordPress LMS by Masteriyo plugin <= 1.7.2 - Privilege Escalation vulnerability 2.1%