ML
Product
MasterStudy LMS
19
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 6High 5Medium 8Low 0
Watch
Add MasterStudy LMS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-37094 | 9.8 | Nov 1 | WordPress MasterStudy LMS plugin <= 3.2.12 - Broken Access Control vulnerability Affected: through 3.2.12 |
| CVE-2024-3136 | 9.8 | Apr 9 | MasterStudy LMS <= 3.3.3 - Unauthenticated Local File Inclusion via template Affected: before 3.3.4 |
| CVE-2024-2411 | 9.8 | Mar 29 | MasterStudy LMS <= 3.3.0 - Unauthenticated Local File Inclusion via modal Affected: before 3.3.1 |
| CVE-2024-2409 | 9.8 | Mar 29 | MasterStudy LMS <= 3.3.1 - Unauthenticated Privilege Escalation via stm_lms_register AJAX Action Affected: before 3.3.2 |
| CVE-2024-1512 | 9.8 | Feb 17 | MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.5 - Unauthenticated SQL Injection Affected: through 3.2.5 |
| CVE-2022-0441 | 9.8 | Mar 7 | The MasterStudy LMS WordPress plugin before 2.7.6 does to validate some parameters given when registering a new account, allowing unauthenticated users to register as an admin Affected: before 2.7.6 |
| CVE-2024-37093 | 8.8 | Jan 2 | WordPress MasterStudy LMS plugin <= 3.2.1 - Cross Site Request Forgery (CSRF) vulnerability Affected: before 3.2.2 |
| CVE-2024-5973 | 8.8 | Jul 22 | MasterStudy LMS < 3.3.24 - Privilege Escalation to Instructor Affected: before 3.3.24 |
| CVE-2026-40766 | 8.5 | Jun 15 | WordPress MasterStudy LMS plugin <= 3.7.25 - SQL Injection vulnerability Affected: through 3.7.25 |
| CVE-2024-2106 | 7.5 | Mar 13 | MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.10 - Basic Information Exposure via REST route Affected: before 3.2.11 |
| CVE-2023-4278 | 7.5 | Sep 11 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.0.18 does not have proper checks in place during registration allowing anyone to register on the site as an… Affected: before 3.0.18 |
| CVE-2026-105079 | 6.5 | Oct 8 | WordPress MasterStudy LMS plugin <= 3.7.52 - Cross Site Scripting (XSS) vulnerability Affected: through 3.7.52 |
| CVE-2023-35093 | 6.5 | Jun 22 | Broken Access Control vulnerability in StylemixThemes MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin <= 3.0.8 versions allows any logged-in users, such… Affected: through 3.0.8 |
| CVE-2024-3942 | 5.4 | May 2 | MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.3.8 - Missing Authorization Affected: before 3.3.9 |
| CVE-2023-35090 | 5.4 | Jun 22 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in StylemixThemes MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin <= 3.0.7 versions Affected: through 3.0.7 |
| CVE-2026-28145 | 5.3 | Jul 31 | WordPress MasterStudy LMS plugin <= 3.7.39 - Broken Access Control vulnerability Affected: through 3.7.39 |
| CVE-2024-43990 | 5.3 | Sep 25 | WordPress Masterstudy LMS Starter theme <= 1.1.8 - Sensitive Data Exposure vulnerability Affected: before 1.1.9 |
| CVE-2026-118092 New | 4.3 | Oct 29 | WordPress MasterStudy LMS plugin <= 3.7.55 - Broken Access Control vulnerability Affected: through 3.7.55 |
| CVE-2024-1904 | 4.3 | Apr 9 | MasterStudy LMS <= 3.2.13 - Missing Authorization to Sensitive Information Exposure in search_posts Affected: before 3.3.0 |
Showing 19