agentprime: stylemix-masterstudy-lms-wordpress-plugin-for-online-courses-and-educationEvery new CVE for stylemix-masterstudy-lms-wordpress-plugin-for-online-courses-and-education.https://agentprime.io/CVE-2026-5060: MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.14 - Insecure Direct Object Reference to Authenticated (Instructor+) Arbitrary Attachment Deletionhttps://agentprime.io/advisories/CVE-2026-5060/https://agentprime.io/advisories/CVE-2026-5060/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 09:31:14 GMTCVECVE-2026-4817: MasterStudy LMS <= 3.7.25 - Authenticated (Subscriber+) Time-based Blind SQL Injection via 'order' and 'orderby' Parametershttps://agentprime.io/advisories/CVE-2026-4817/https://agentprime.io/advisories/CVE-2026-4817/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 Apr 2026 01:24:37 GMTCVECVE-2026-0559: MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'stm_lms_courses_grid_display' Shortcodehttps://agentprime.io/advisories/CVE-2026-0559/https://agentprime.io/advisories/CVE-2026-0559/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 14 Feb 2026 06:42:32 GMTCVECVE-2025-13766: MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.6 Missing Authorization to Authenticated (Subscriber+) Posts and Media Creation, Modification and Deletionhttps://agentprime.io/advisories/CVE-2025-13766/https://agentprime.io/advisories/CVE-2025-13766/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Jan 2026 08:21:48 GMTCVECVE-2024-3942: MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.3.8 - Missing Authorizationhttps://agentprime.io/advisories/CVE-2024-3942/https://agentprime.io/advisories/CVE-2024-3942/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 May 2024 16:52:11 GMTCVECVE-2024-3136: MasterStudy LMS <= 3.3.3 - Unauthenticated Local File Inclusion via templatehttps://agentprime.io/advisories/CVE-2024-3136/https://agentprime.io/advisories/CVE-2024-3136/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Apr 2024 18:59:08 GMTCVEcriticalCVE-2024-1904: MasterStudy LMS <= 3.2.13 - Missing Authorization to Sensitive Information Exposure in search_postshttps://agentprime.io/advisories/CVE-2024-1904/https://agentprime.io/advisories/CVE-2024-1904/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Apr 2024 18:58:37 GMTCVECVE-2024-2411: MasterStudy LMS <= 3.3.0 - Unauthenticated Local File Inclusion via modalhttps://agentprime.io/advisories/CVE-2024-2411/https://agentprime.io/advisories/CVE-2024-2411/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 Mar 2024 08:31:30 GMTCVEcriticalCVE-2024-2409: MasterStudy LMS <= 3.3.1 - Unauthenticated Privilege Escalation via stm_lms_register AJAX Actionhttps://agentprime.io/advisories/CVE-2024-2409/https://agentprime.io/advisories/CVE-2024-2409/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 Mar 2024 08:31:29 GMTCVEcriticalCVE-2024-2106: MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.10 - Basic Information Exposure via REST routehttps://agentprime.io/advisories/CVE-2024-2106/https://agentprime.io/advisories/CVE-2024-2106/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Mar 2024 15:26:39 GMTCVECVE-2024-1512: MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.5 - Unauthenticated SQL Injectionhttps://agentprime.io/advisories/CVE-2024-1512/https://agentprime.io/advisories/CVE-2024-1512/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.78 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Feb 2024 07:36:57 GMTCVEcritical