Advisories · Technology

StylemixThemes MasterStudy LMS Pro.

Every CVE that names StylemixThemes MasterStudy LMS Pro among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-64215 CVE record

CVSS 6.5 Medium

WordPress MasterStudy LMS Pro plugin < 4.7.16 - Broken Access Control vulnerability
- StylemixThemes MasterStudy LMS Pro
- Broken access control
Not analysed yet 15 Jun 2026
CVE-2026-8653 CVE record

CVSS 6.5 Medium

MasterStudy LMS Pro Plus <= 4.8.20 - Authenticated (Instructor+) SQL Injection via 'columns' Parameter
- StylemixThemes MasterStudy LMS Pro
- SQL injection
Not analysed yet 4 Jun 2026
CVE-2025-64214 CVE record

CVSS 7.5 High

WordPress MasterStudy LMS Pro plugin < 4.7.16 - Arbitrary Content Deletion vulnerability
- StylemixThemes MasterStudy LMS Pro
- Broken access control
Not analysed yet 18 Dec 2025
CVE-2025-64213 CVE record

CVSS 7.5 High

WordPress MasterStudy LMS Pro plugin < 4.7.16 - Sensitive Data Exposure vulnerability
- StylemixThemes MasterStudy LMS Pro
- Information disclosure
Not analysed yet 18 Dec 2025
CVE-2025-64212 CVE record

CVSS 5.4 Medium

WordPress MasterStudy LMS Pro plugin < 4.7.16 - Broken Access Control vulnerability
- StylemixThemes MasterStudy LMS Pro
- Broken access control
Not analysed yet 29 Oct 2025
CVE-2025-7438 CVE record

CVSS 7.5 High

MasterStudy LMS – Online Courses, eLearning PRO Plus <= 4.7.9 - Authenticated (Subscriber+) Arbitrary File Upload
- StylemixThemes MasterStudy LMS Pro
- Unrestricted file upload
Not analysed yet 18 Jul 2025
CVE-2025-4800 CVE record

CVSS 8.8 High

MasterStudy LMS Pro <= 4.7.0 - Authenticated (Subscriber+) Arbitrary File Upload
- StylemixThemes MasterStudy LMS Pro
- Unrestricted file upload
Not analysed yet 28 May 2025