Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Masteriyo LMS – Online Course Builder for eLearning, LMS & Education — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in Masteriyo LMS – Online Course Builder for eLearning, LMS & Education, with AI-generated Chinese analysis, references, and POCs.

Vendor: masteriyo

CVE IDTitleCVSSSeverityPublished
CVE-2026-5167 Masteriyo LMS <= 2.1.7 - Unauthenticated Authorization Bypass to Arbitrary Order Completion via Stripe Webhook Endpoint CWE-639 5.3 Medium2026-04-08
CVE-2026-4484 Masteriyo LMS <= 2.1.6 - Missing Authorization to Authenticated (Student+) Privilege Escalation to Administrator CWE-862 8.8 High2026-03-26
CVE-2024-10000 Masteriyo LMS – eLearning and Online Course Builder for WordPress <= 1.13.3 - Authenticated (Student+) Stored Cross-Site Scripting via Ask a Question Functionality CWE-79 6.4 Medium2024-10-29
CVE-2024-10008 Masteriyo LMS – eLearning and Online Course Builder for WordPress <= 1.13.3 - Authenticated (Student+) Missing Authorization to Privilege Escalation CWE-862 8.8 High2024-10-29

All 4 known CVE vulnerabilities affecting Masteriyo LMS – Online Course Builder for eLearning, LMS & Education with full Chinese analysis, references, and POCs where available.