Masteriyo - LMS vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

ML

Product

Masteriyo - LMS

by masteriyo · last CVE Sep 11, 2026

7

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities7 In the news0 Timeline

Severity mix

Critical 1High 1Medium 5Low 0

Severity

All severities7 Critical1 High1 Medium5 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Masteriyo - LMS to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-73996	9.8	1%	Aug 18	WordPress Masteriyo - LMS plugin <= 2.3.2 - Arbitrary File Upload vulnerability Affected: through 2.3.2
CVE-2026-62107	8.8	1%	Sep 11	WordPress Masteriyo - LMS plugin <= 3.4.0 - PHP Object Injection vulnerability Affected: through 3.4.0
CVE-2026-59513	6.5	0%	Jul 23	WordPress Masteriyo - LMS plugin <= 2.3.0 - Cross Site Scripting (XSS) vulnerability Affected: through 2.3.0
CVE-2025-64270	6.5	0%	Dec 18	WordPress Masteriyo - LMS plugin <= 2.0.3 - Sensitive Data Exposure vulnerability Affected: through 2.0.3
CVE-2025-54699	6.5	0%	Aug 14	WordPress Masteriyo - LMS Plugin plugin <= 1.18.3 - Cross Site Scripting (XSS) Vulnerability Affected: through 1.18.3
CVE-2026-65463	5.4	0%	Jul 23	WordPress Masteriyo - LMS plugin <= 2.3.1 - Insecure Direct Object References (IDOR) vulnerability Affected: through 2.3.1
CVE-2026-62132	5.3	0%	Sep 11	WordPress Masteriyo - LMS plugin <= 3.4.0 - Broken Access Control vulnerability Affected: through 3.4.0