Masteriyo - LMS
masteriyo
Developer
3.4.3
Latest version
6,000
Installations
No date
Last updated
Vulnerability history
0 present
31 patched
13 Mitigation rules
- Subscriber+ Arbitrary User Course Progress Disclosure vulnerability< 3.4.224/09/2026
- Subscriber+ Quiz Answer Key Disclosure vulnerability< 3.4.224/09/2026
- Instructor+ Stored XSS vulnerability< 3.4.112/09/2026
- Instructor+ Arbitrary Post Disclosure vulnerability1.14.0-3.4.012/09/2026
- WordPress Masteriyo - LMS plugin <= 3.4.0 - PHP Object Injection vulnerability<= 3.4.011/09/2026
- WordPress Masteriyo - LMS plugin <= 3.4.0 - Broken Access Control vulnerability<= 3.4.010/09/2026
- Unauthenticated Course Enrollment Disclosure vulnerability1.3.1-2.3.309/09/2026
- Missing Authorization to Unauthenticated Arbitrary Course Progress Deletion vulnerability<= 2.2.007/09/2026
- Instructor+ Stored XSS vulnerability1.18.0-2.3.305/09/2026
- Unauthenticated Course Progress Disclosure and Deletion vulnerability< 2.2.125/08/2026
- Instructor+ Stored XSS via Quiz Description vulnerability< 2.3.320/08/2026
- WordPress Masteriyo - LMS plugin <= 2.3.2 - Arbitrary File Upload vulnerability<= 2.3.218/08/2026
- Unauthenticated Arbitrary User Session Termination (Denial of Service) vulnerability< 2.3.129/07/2026
- WordPress Masteriyo - LMS plugin <= 2.3.1 - Insecure Direct Object References (IDOR) vulnerability<= 2.3.122/07/2026
- WordPress Masteriyo - LMS plugin <= 2.3.0 - Cross Site Scripting (XSS) vulnerability<= 2.3.021/07/2026
- Missing Authorization to Authenticated (Student+) Arbitrary Course Announcement Modification vulnerability<= 2.2.126/06/2026
- WordPress Masteriyo - LMS plugin <= 2.2.0 - Privilege Escalation vulnerability<= 2.2.008/06/2026
- WordPress Masteriyo - LMS plugin <= 2.1.8 - Broken Authentication vulnerability<= 2.1.828/05/2026
- WordPress Masteriyo - LMS plugin <= 2.1.5 - Payment Bypass vulnerability<= 2.1.508/04/2026
- Unauthenticated Authorization Bypass to Arbitrary Order Completion via Stripe Webhook Endpoint vulnerability<= 2.1.708/04/2026
- Missing Authorization to Authenticated (Student+) Privilege Escalation to Administrator vulnerability<= 2.1.630/03/2026
- WordPress Masteriyo - LMS plugin <= 2.0.3 - Sensitive Data Exposure vulnerability<= 2.0.330/11/2025
- WordPress Masteriyo - LMS Plugin plugin <= 1.18.3 - Cross Site Scripting (XSS) Vulnerability<= 1.18.330/07/2025
- Authenticated (Student+) Missing Authorization to Privilege Escalation vulnerability<= 1.13.328/10/2024
- Authenticated (Student+) Stored Cross-Site Scripting vulnerability<= 1.13.328/10/2024
- Insecure Direct Object Reference (IDOR) vulnerability<= 1.11.412/08/2024
- Broken Access Control vulnerability<= 1.11.607/08/2024
- Broken Access Control vulnerability<= 1.11.407/08/2024
- Broken Authentication vulnerability<= 1.7.330/04/2024
- Privilege Escalation vulnerability<= 1.7.205/04/2024
- Wordpress Masteriyo - LMS plugin <= 1.6.7 - Sensitive Information Exposure vulnerability< 1.6.806/07/2023