Advisories · Technology
Masteriyo - LMS.
Every CVE that names Masteriyo - LMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
WordPress Masteriyo - LMS plugin <= 3.4.3 - Arbitrary Content Deletion vulnerability
- Masteriyo - LMS
- Broken access control
- CVSS 4.3 Medium
Masteriyo LMS < 3.4.2 - Subscriber+ Quiz Answer Key Disclosure
- Masteriyo LMS
- Information disclosure
- CVSS 4.3 Medium
Masteriyo LMS < 3.4.2 - Subscriber+ Arbitrary User Course Progress Disclosure via IDOR
- Masteriyo LMS
- Broken access control
- CVSS 2.7 Low
Masteriyo LMS 1.14.0 - 3.4.0 - Instructor+ Arbitrary Post Disclosure via IDOR
- Masteriyo LMS
- Broken access control
- CVSS 6.8 Medium
Masteriyo LMS < 3.4.1 - Instructor+ Stored XSS via Course Highlights
- Masteriyo LMS
- Cross-site scripting (XSS)
- CVSS 9.9 CriticalCritical · CVSS 9+
Masteriyo LMS < 3.4.1 - Subscriber+ PHP Object Injection
- Masteriyo LMS
- Insecure deserialization
- CVSS 5.3 Medium
WordPress Masteriyo - LMS plugin <= 3.4.0 - Broken Access Control vulnerability
- Masteriyo - LMS
- Broken access control
- CVSS 8.8 High
WordPress Masteriyo - LMS plugin <= 3.4.0 - PHP Object Injection vulnerability
- Masteriyo - LMS
- Insecure deserialization
- CVSS 5.3 Medium
Masteriyo LMS 1.3.1 - 2.3.3 - Unauthenticated Course Enrollment Disclosure
- Masteriyo LMS
- Broken access control
- CVSS 6.8 Medium
Masteriyo LMS 1.18.0 - 2.3.3 - Instructor+ Stored XSS via Course Custom Fields
- Masteriyo LMS
- Cross-site scripting (XSS)
- CVSS 6.1 Medium
Masteriyo LMS < 2.3.3 - Instructor+ Stored XSS via Quiz Description
- Masteriyo LMS
- Cross-site scripting (XSS)
- CVSS 9.1 CriticalCritical · CVSS 9+
Masteriyo LMS < 2.3.1 - Unauthenticated Arbitrary User Session Termination (Denial of Service)
- Masteriyo LMS
- Authentication bypass
- CVSS 5.4 Medium
WordPress Masteriyo - LMS plugin <= 2.3.1 - Insecure Direct Object References (IDOR) vulnerability
- Masteriyo - LMS
- Broken access control
- CVSS 6.5 Medium
WordPress Masteriyo - LMS plugin <= 2.3.0 - Cross Site Scripting (XSS) vulnerability
- Masteriyo - LMS
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
Masteriyo LMS < 2.2.1 - Unauthenticated Course Progress Disclosure and Deletion
- Masteriyo LMS
- CVSS 6.5 Medium
WordPress Masteriyo - LMS plugin <= 2.0.3 - Sensitive Data Exposure vulnerability
- Masteriyo - LMS
- Information disclosure
- CVSS 6.5 Medium
WordPress Masteriyo - LMS Plugin plugin <= 1.18.3 - Cross Site Scripting (XSS) Vulnerability
- Masteriyo - LMS
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
WordPress LMS by Masteriyo plugin <= 1.7.3 - Broken Authentication vulnerability
- Masteriyo - LMS
- Authentication bypass
- CVSS 7.5 High
WordPress Masteriyo LMS plugin <= 1.11.4 - Broken Access Control vulnerability
- Masteriyo - LMS
- Broken access control
- CVSS 5.3 Medium
WordPress Masteriyo LMS plugin <= 1.11.6 - Broken Access Control vulnerability
- Masteriyo - LMS
- Broken access control
- CVSS 4.3 Medium
WordPress Masteriyo LMS plugin <= 1.11.4 - Insecure Direct Object Reference (IDOR) vulnerability
- Masteriyo - LMS
- Broken access control
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress LMS by Masteriyo plugin <= 1.7.2 - Privilege Escalation vulnerability
- Masteriyo - LMS
- Privilege escalation