ML
Product
MasterStudy LMS
18
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 6High 5Medium 7Low 0
Watch
Add MasterStudy LMS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-37094 | 9.8 | Nov 1 | WordPress MasterStudy LMS plugin <= 3.2.12 - Broken Access Control vulnerability Affected: through 3.2.12 |
| CVE-2024-3136 | 9.8 | Apr 9 | The MasterStudy LMS plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.3.3 via the 'template' parameter Affected: before 3.3.4 |
| CVE-2024-2411 | 9.8 | Mar 29 | The MasterStudy LMS plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.3.0 via the 'modal' parameter Affected: before 3.3.1 |
| CVE-2024-2409 | 9.8 | Mar 29 | The MasterStudy LMS plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.3.1 Affected: before 3.3.2 |
| CVE-2024-1512 | 9.8 | Feb 17 | The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to union based SQL Injection via the 'user' parameter of the… Affected: through 3.2.5 |
| CVE-2022-0441 | 9.8 | Mar 7 | The MasterStudy LMS WordPress plugin before 2.7.6 does to validate some parameters given when registering a new account, allowing unauthenticated users to register as an admin Affected: before 2.7.6 |
| CVE-2024-37093 | 8.8 | Jan 2 | WordPress MasterStudy LMS plugin <= 3.2.1 - Cross Site Request Forgery (CSRF) vulnerability Affected: before 3.2.2 |
| CVE-2024-5973 | 8.8 | Jul 22 | MasterStudy LMS < 3.3.24 - Privilege Escalation to Instructor Affected: before 3.3.24 |
| CVE-2026-40766 | 8.5 | Jun 15 | WordPress MasterStudy LMS plugin <= 3.7.25 - SQL Injection vulnerability Affected: through 3.7.25 |
| CVE-2024-2106 | 7.5 | Mar 13 | The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to Information Exposure in versions up to, and including, 3.2.10 Affected: before 3.2.11 |
| CVE-2023-4278 | 7.5 | Sep 11 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.0.18 does not have proper checks in place during registration allowing anyone to register on the site as an… Affected: before 3.0.18 |
| CVE-2026-105079 | 6.5 | Oct 8 | WordPress MasterStudy LMS plugin <= 3.7.52 - Cross Site Scripting (XSS) vulnerability Affected: through 3.7.52 |
| CVE-2023-35093 | 6.5 | Jun 22 | Broken Access Control vulnerability in StylemixThemes MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin <= 3.0.8 versions allows any logged-in users, such… Affected: through 3.0.8 |
| CVE-2024-3942 | 5.4 | May 2 | The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing… Affected: before 3.3.9 |
| CVE-2023-35090 | 5.4 | Jun 22 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in StylemixThemes MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin <= 3.0.7 versions Affected: through 3.0.7 |
| CVE-2026-28145 | 5.3 | Jul 31 | WordPress MasterStudy LMS plugin <= 3.7.39 - Broken Access Control vulnerability Affected: through 3.7.39 |
| CVE-2024-43990 | 5.3 | Sep 25 | WordPress Masterstudy LMS Starter theme <= 1.1.8 - Sensitive Data Exposure vulnerability Affected: before 1.1.9 |
| CVE-2024-1904 | 4.3 | Apr 9 | The MasterStudy LMS plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the search_posts function in all versions up to, and… Affected: before 3.3.0 |
Showing 18