MA
Product
Masteriyo
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 3Low 0
Watch
Add Masteriyo to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-24882 | 9.8 | May 17 | WordPress LMS by Masteriyo plugin <= 1.7.2 - Privilege Escalation vulnerability Affected: through 1.7.2 |
| CVE-2024-43239 | 8.1 | Aug 18 | WordPress Masteriyo LMS plugin <= 1.11.4 - Insecure Direct Object Reference (IDOR) vulnerability Affected: before 1.11.5 |
| CVE-2024-43158 | 7.5 | Nov 1 | WordPress Masteriyo LMS plugin <= 1.11.4 - Broken Access Control vulnerability Affected: before 1.11.5 |
| CVE-2024-10008 | 6.5 | Oct 29 | Masteriyo LMS – eLearning and Online Course Builder for WordPress <= 1.13.3 - Authenticated (Student+) Missing Authorization to Privilege Escalation Affected: before 1.13.4 |
| CVE-2024-10000 | 5.4 | Oct 29 | Masteriyo LMS – eLearning and Online Course Builder for WordPress <= 1.13.3 - Authenticated (Student+) Stored Cross-Site Scripting via Ask a Question Functionality Affected: before 1.13.4 |
| CVE-2024-43159 | 5.3 | Nov 1 | WordPress Masteriyo LMS plugin <= 1.11.6 - Broken Access Control vulnerability Affected: before 1.12.0 |
Showing 6
