Masteriyo Masteriyo - LMS vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Masteriyo Masteriyo - LMS: 6 record(s), with affected versions and fixes.

CVE-2026-62132 Medium · 5.3 CWE-862 Sep 11, 2026

WordPress Masteriyo - LMS plugin <= 3.4.0 - Broken Access Control vulnerability

Subscriber Broken Access Control in Masteriyo - LMS <= 3.4.0 versions.

CVE-2026-62107 High · 8.8 CWE-502 Sep 11, 2026

WordPress Masteriyo - LMS plugin <= 3.4.0 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Masteriyo - LMS <= 3.4.0 versions.

CVE-2026-73996 Critical · 9.8 CWE-434 Aug 18, 2026

WordPress Masteriyo - LMS plugin <= 2.3.2 - Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload in Masteriyo - LMS <= 2.3.2 versions.

CVE-2026-65463 Medium · 5.4 CWE-639 Jul 23, 2026

WordPress Masteriyo - LMS plugin <= 2.3.1 - Insecure Direct Object References (IDOR) vulnerability

Subscriber Insecure Direct Object References (IDOR) in Masteriyo - LMS <= 2.3.1 versions.

CVE-2026-59513 Medium · 6.5 CWE-79 Jul 23, 2026

WordPress Masteriyo - LMS plugin <= 2.3.0 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting (XSS) in Masteriyo - LMS <= 2.3.0 versions.

CVE-2025-64270 Medium · 6.5 CWE-497 Dec 18, 2025

WordPress Masteriyo - LMS plugin <= 2.0.3 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in masteriyo Masteriyo - LMS learning-management-system allows Retrieve Embedded Sensitive Data.This issue affects Masteriyo - LMS: from n/a through <= 2.0.3.