masteriyo Masteriyo LMS – Online Course Builder for eLearning, LMS & Education

• CVE-2026-5167 Medium 5.3 Masteriyo LMS <= 2.1.7 - Unauthenticated Authorization Bypass to Arbitrary Order Completion via Stripe Webhook Endpoint 0.4%
• CVE-2026-4484 High 8.8 Masteriyo LMS <= 2.1.6 - Missing Authorization to Authenticated (Student+) Privilege Escalation to Administrator 0.4%
• CVE-2024-10000 Medium 6.4 Masteriyo LMS – eLearning and Online Course Builder for WordPress <= 1.13.3 - Authenticated (Student+) Stored Cross-Site Scripting via Ask a Question Functionality 0.3%
• CVE-2024-10008 High 8.8 Masteriyo LMS – eLearning and Online Course Builder for WordPress <= 1.13.3 - Authenticated (Student+) Missing Authorization to Privilege Escalation 0.6%