Advisories · Technology

ThemeGrill Masteriyo - LMS.

Every CVE that names ThemeGrill Masteriyo - LMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-73996 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WordPress Masteriyo - LMS plugin <= 2.3.2 - Arbitrary File Upload vulnerability
- ThemeGrill Masteriyo - LMS
- Unrestricted file upload
Not analysed yet 18 Aug 2026
CVE-2026-42743 CVE record

CVSS 6.5 Medium

WordPress Masteriyo - LMS plugin <= 2.1.8 - Broken Authentication vulnerability
- ThemeGrill Masteriyo - LMS
- Weak cryptography or TLS
Not analysed yet 15 Jun 2026
CVE-2026-39524 CVE record

CVSS 7.5 High

WordPress Masteriyo - LMS plugin <= 2.1.5 - Payment Bypass vulnerability
- ThemeGrill Masteriyo - LMS
- Broken access control
Not analysed yet 15 Jun 2026
CVE-2026-49111 CVE record

CVSS 8.8 High

WordPress Masteriyo - LMS plugin <= 2.2.0 - Privilege Escalation vulnerability
- ThemeGrill Masteriyo - LMS
- Privilege escalation
Not analysed yet 15 Jun 2026