ML
Product
MasterStudy LMS WordPress Plugin – for Online Courses and Education
4
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 4Low 0
Watch
Add MasterStudy LMS WordPress Plugin – for Online Courses and Education to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-5060 | 6.5 | Jul 29 | MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.14 - Insecure Direct Object Reference to Authenticated (Instructor+) Arbitrary Attachment Deletion Affected: through 3.7.23 |
| CVE-2026-4817 | 6.5 | Apr 17 | MasterStudy LMS <= 3.7.25 - Authenticated (Subscriber+) Time-based Blind SQL Injection via 'order' and 'orderby' Parameters Affected: through 3.7.25 |
| CVE-2026-0559 | 6.4 | Feb 14 | MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'stm_lms_courses_grid_display' Shortcode Affected: through 3.7.11 |
| CVE-2025-13766 | 5.4 | Jan 6 | MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.6 Missing Authorization to Authenticated (Subscriber+) Posts and Media Creation, Modification and Deletion Affected: through 3.7.6 |
Showing 4