ML
Product
MasterStudy LMS
19
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 6High 5Medium 8Low 0
Watch
Add MasterStudy LMS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-37094 | 9.8 | Nov 1 | WordPress MasterStudy LMS plugin <= 3.2.12 - Broken Access Control vulnerability Affected: through 3.2.12 |
| CVE-2024-3136 | 9.8 | Apr 9 | MasterStudy LMS <= 3.3.3 - Unauthenticated Local File Inclusion via template Affected: before 3.3.4 |
| CVE-2024-2411 | 9.8 | Mar 29 | MasterStudy LMS <= 3.3.0 - Unauthenticated Local File Inclusion via modal Affected: before 3.3.1 |
| CVE-2024-2409 | 9.8 | Mar 29 | MasterStudy LMS <= 3.3.1 - Unauthenticated Privilege Escalation via stm_lms_register AJAX Action Affected: before 3.3.2 |
| CVE-2024-1512 | 9.8 | Feb 17 | MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.5 - Unauthenticated SQL Injection Affected: through 3.2.5 |
| CVE-2022-0441 | 9.8 | Mar 7 | The MasterStudy LMS WordPress plugin before 2.7.6 does to validate some parameters given when registering a new account, allowing unauthenticated users to register as an admin Affected: before 2.7.6 |
Showing 6
