Advisories · Technology

StylemixThemes MasterStudy LMS.

Every CVE that names StylemixThemes MasterStudy LMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-119478 CVE record

CVSS 4.3 Medium

WordPress MasterStudy LMS plugin <= 3.7.56 - Content Injection vulnerability
- StylemixThemes MasterStudy LMS
- Cross-site scripting (XSS)
Not analysed yet 7 Nov 2026
CVE-2026-118092 CVE record

CVSS 4.3 Medium

WordPress MasterStudy LMS plugin <= 3.7.55 - Broken Access Control vulnerability
- StylemixThemes MasterStudy LMS
- Broken access control
Not analysed yet 29 Oct 2026
CVE-2026-105079 CVE record

CVSS 6.5 Medium

WordPress MasterStudy LMS plugin <= 3.7.52 - Cross Site Scripting (XSS) vulnerability
- StylemixThemes MasterStudy LMS
- Cross-site scripting (XSS)
Not analysed yet 8 Oct 2026
CVE-2026-28145 CVE record

CVSS 5.3 Medium

WordPress MasterStudy LMS plugin <= 3.7.39 - Broken Access Control vulnerability
- StylemixThemes MasterStudy LMS
- CWE-345
Not analysed yet 31 Jul 2026
CVE-2026-40766 CVE record

CVSS 8.5 High

WordPress MasterStudy LMS plugin <= 3.7.25 - SQL Injection vulnerability
- StylemixThemes MasterStudy LMS
- SQL injection
Not analysed yet 15 Jun 2026
CVE-2024-37094 CVE record

CVSS 8.2 High

WordPress MasterStudy LMS plugin <= 3.2.12 - Broken Access Control vulnerability
- StylemixThemes MasterStudy LMS
- Broken access control
Not analysed yet 1 Nov 2024