MA
Vendor
masteriyo
24
CVEs
0
On KEV
0
New 30D
Products
ML9.8
Masteriyo - LMS
masteriyo
12 CVEs0 on KEV0 new
MA9.8
Masteriyo
Masteriyo
6 CVEs0 on KEV0 new
ML8.8
Masteriyo LMS – Online Course Builder for eLearning, LMS & Education
masteriyo
4 CVEs0 on KEV0 new
ML5.3
Masteriyo LMS – LMS Course Builder, Quizzes & Certificates
masteriyo
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-62132 | ML Masteriyo - LMS masteriyo | 5.3 | Sep 11 | WordPress Masteriyo - LMS plugin <= 3.4.0 - Broken Access Control vulnerability |
| CVE-2026-62107 | ML Masteriyo - LMS masteriyo | 8.8 | Sep 11 | WordPress Masteriyo - LMS plugin <= 3.4.0 - PHP Object Injection vulnerability |
| CVE-2026-8279 | ML Masteriyo LMS – LMS Course Builder, Quizzes & Certificates masteriyo | 5.3 | Sep 7 | Masteriyo LMS <= 2.2.0 - Missing Authorization to Unauthenticated Arbitrary Course Progress Deletion |
| CVE-2026-73996 | ML Masteriyo - LMS masteriyo | 9.8 | Aug 18 | WordPress Masteriyo - LMS plugin <= 2.3.2 - Arbitrary File Upload vulnerability |
| CVE-2026-65463 | ML Masteriyo - LMS masteriyo | 5.4 | Jul 23 | WordPress Masteriyo - LMS plugin <= 2.3.1 - Insecure Direct Object References (IDOR) vulnerability |
| CVE-2026-59513 | ML Masteriyo - LMS masteriyo | 6.5 | Jul 23 | WordPress Masteriyo - LMS plugin <= 2.3.0 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-11773 | ML Masteriyo LMS – LMS Course Builder, Quizzes & Certificates masteriyo | 4.3 | Jun 27 | Masteriyo LMS <= 2.2.1 - Missing Authorization to Authenticated (Student+) Arbitrary Course Announcement Modification |
| CVE-2026-5167 | ML Masteriyo LMS – Online Course Builder for eLearning, LMS & Education masteriyo | 5.3 | Apr 8 | Masteriyo LMS <= 2.1.7 - Unauthenticated Authorization Bypass to Arbitrary Order Completion via Stripe Webhook Endpoint |
| CVE-2026-4484 | ML Masteriyo LMS – Online Course Builder for eLearning, LMS & Education masteriyo | 8.8 | Mar 26 | Masteriyo LMS <= 2.1.6 - Missing Authorization to Authenticated (Student+) Privilege Escalation to Administrator |
| CVE-2025-64270 | ML Masteriyo - LMS masteriyo | 6.5 | Dec 18 | WordPress Masteriyo - LMS plugin <= 2.0.3 - Sensitive Data Exposure vulnerability |
| CVE-2025-54699 | ML Masteriyo - LMS masteriyo | 6.5 | Aug 14 | WordPress Masteriyo - LMS Plugin plugin <= 1.18.3 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2024-33939 | ML Masteriyo - LMS masteriyo | 5.3 | May 19 | WordPress LMS by Masteriyo plugin <= 1.7.3 - Broken Authentication vulnerability |
| CVE-2024-43158 | ML Masteriyo - LMS masteriyo | 7.5 | Nov 1 | WordPress Masteriyo LMS plugin <= 1.11.4 - Broken Access Control vulnerability |
| CVE-2024-43159 | ML Masteriyo - LMS masteriyo | 5.3 | Nov 1 | WordPress Masteriyo LMS plugin <= 1.11.6 - Broken Access Control vulnerability |
| CVE-2024-10000 | ML Masteriyo LMS – Online Course Builder for eLearning, LMS & Education masteriyo | 5.4 | Oct 29 | Masteriyo LMS – eLearning and Online Course Builder for WordPress <= 1.13.3 - Authenticated (Student+) Stored Cross-Site Scripting via Ask a Question Functionality |
| CVE-2024-10008 | ML Masteriyo LMS – Online Course Builder for eLearning, LMS & Education masteriyo | 6.5 | Oct 29 | Masteriyo LMS – eLearning and Online Course Builder for WordPress <= 1.13.3 - Authenticated (Student+) Missing Authorization to Privilege Escalation |
| CVE-2024-43239 | ML Masteriyo - LMS masteriyo | 8.1 | Aug 18 | WordPress Masteriyo LMS plugin <= 1.11.4 - Insecure Direct Object Reference (IDOR) vulnerability |
| CVE-2024-24882 | ML Masteriyo - LMS masteriyo | 9.8 | May 17 | WordPress LMS by Masteriyo plugin <= 1.7.2 - Privilege Escalation vulnerability |