MA
Vendor
masteriyo
16
CVEs
0
On KEV
0
New 30D
Products
ML9.8
Masteriyo - LMS
masteriyo
7 CVEs0 on KEV0 new
MA8.1
Masteriyo
Masteriyo
5 CVEs0 on KEV0 new
ML5.3
Masteriyo LMS – LMS Course Builder, Quizzes & Certificates
masteriyo
2 CVEs0 on KEV0 new
ML8.8
Masteriyo LMS – Online Course Builder for eLearning, LMS & Education
masteriyo
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-62132 | ML Masteriyo - LMS masteriyo | 5.3 | Sep 11 | WordPress Masteriyo - LMS plugin <= 3.4.0 - Broken Access Control vulnerability |
| CVE-2026-62107 | ML Masteriyo - LMS masteriyo | 8.8 | Sep 11 | WordPress Masteriyo - LMS plugin <= 3.4.0 - PHP Object Injection vulnerability |
| CVE-2026-8279 | ML Masteriyo LMS – LMS Course Builder, Quizzes & Certificates masteriyo | 5.3 | Sep 7 | Masteriyo LMS <= 2.2.0 - Missing Authorization to Unauthenticated Arbitrary Course Progress Deletion |
| CVE-2026-73996 | ML Masteriyo - LMS masteriyo | 9.8 | Aug 18 | WordPress Masteriyo - LMS plugin <= 2.3.2 - Arbitrary File Upload vulnerability |
| CVE-2026-65463 | ML Masteriyo - LMS masteriyo | 5.4 | Jul 23 | WordPress Masteriyo - LMS plugin <= 2.3.1 - Insecure Direct Object References (IDOR) vulnerability |
| CVE-2026-59513 | ML Masteriyo - LMS masteriyo | 6.5 | Jul 23 | WordPress Masteriyo - LMS plugin <= 2.3.0 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-11773 | ML Masteriyo LMS – LMS Course Builder, Quizzes & Certificates masteriyo | 4.3 | Jun 27 | Masteriyo LMS <= 2.2.1 - Missing Authorization to Authenticated (Student+) Arbitrary Course Announcement Modification |
| CVE-2026-5167 | ML Masteriyo LMS – Online Course Builder for eLearning, LMS & Education masteriyo | 5.3 | Apr 8 | Masteriyo LMS <= 2.1.7 - Unauthenticated Authorization Bypass to Arbitrary Order Completion via Stripe Webhook Endpoint |
| CVE-2026-4484 | ML Masteriyo LMS – Online Course Builder for eLearning, LMS & Education masteriyo | 8.8 | Mar 26 | Masteriyo LMS <= 2.1.6 - Missing Authorization to Authenticated (Student+) Privilege Escalation to Administrator |
| CVE-2025-64270 | ML Masteriyo - LMS masteriyo | 6.5 | Dec 18 | WordPress Masteriyo - LMS plugin <= 2.0.3 - Sensitive Data Exposure vulnerability |
| CVE-2025-54699 | ML Masteriyo - LMS masteriyo | 6.5 | Aug 14 | WordPress Masteriyo - LMS Plugin plugin <= 1.18.3 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2024-43159 | MA Masteriyo Masteriyo | 5.3 | Nov 1 | Missing Authorization vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.11.6 |
| CVE-2024-43158 | MA Masteriyo Masteriyo | 7.5 | Nov 1 | Missing Authorization vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.11.4 |
| CVE-2024-10008 | MA Masteriyo Masteriyo | 6.5 | Oct 29 | The Masteriyo LMS – eLearning and Online Course Builder for WordPress plugin for WordPress is vulnerable to unauthorized user profile modification due to missing authorization… |
| CVE-2024-10000 | MA Masteriyo Masteriyo | 5.4 | Oct 29 | The Masteriyo LMS – eLearning and Online Course Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the question's content parameter in all… |
| CVE-2024-43239 | MA Masteriyo Masteriyo | 8.1 | Aug 18 | Authorization Bypass Through User-Controlled Key vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <=… |