masteriyo vulnerabilities

CVEs per yearBy the year they were published

1. 20246
2. 20253
3. 20269

Newest CVEs

• CVE-2026-116410

  WordPress Masteriyo - LMS plugin <= 3.4.3 - Arbitrary Content Deletion vulnerability

  masteriyo · Masteriyo - LMS

  Medium6.5
• CVE-2026-62132

  WordPress Masteriyo - LMS plugin <= 3.4.0 - Broken Access Control vulnerability

  masteriyo · Masteriyo - LMS

  Medium5.3
• CVE-2026-62107

  WordPress Masteriyo - LMS plugin <= 3.4.0 - PHP Object Injection vulnerability

  masteriyo · Masteriyo - LMS

  High8.8
• CVE-2026-8279

  Masteriyo LMS <= 2.2.0 - Missing Authorization to Unauthenticated Arbitrary Course Progress Deletion

  masteriyo · Masteriyo LMS – LMS Course Builder, Quizzes & Certificates

  Medium5.3
• CVE-2026-65463

  WordPress Masteriyo - LMS plugin <= 2.3.1 - Insecure Direct Object References (IDOR) vulnerability

  masteriyo · Masteriyo - LMS

  Medium5.4
• CVE-2026-59513

  WordPress Masteriyo - LMS plugin <= 2.3.0 - Cross Site Scripting (XSS) vulnerability

  masteriyo · Masteriyo - LMS

  Medium6.5
• CVE-2026-11773

  Masteriyo LMS <= 2.2.1 - Missing Authorization to Authenticated (Student+) Arbitrary Course Announcement Modification

  masteriyo · Masteriyo LMS – LMS Course Builder, Quizzes & Certificates

  Medium4.3
• CVE-2026-5167

  Masteriyo LMS <= 2.1.7 - Unauthenticated Authorization Bypass to Arbitrary Order Completion via Stripe Webhook Endpoint

  masteriyo · Masteriyo LMS – Online Course Builder for eLearning, LMS & Education

  Medium5.3
• CVE-2026-4484

  Masteriyo LMS <= 2.1.6 - Missing Authorization to Authenticated (Student+) Privilege Escalation to Administrator

  masteriyo · Masteriyo LMS – Online Course Builder for eLearning, LMS & Education

  High8.8
• CVE-2025-64270

  WordPress Masteriyo - LMS plugin <= 2.0.3 - Sensitive Data Exposure vulnerability

  masteriyo · Masteriyo - LMS

  Medium6.5