Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Masteriyo - LMS — Vulnerabilities & Security Advisories 15

All 15 CVE vulnerabilities found in Masteriyo - LMS, with AI-generated Chinese analysis, references, and POCs.

This vulnerability aggregation page details security weaknesses specific to the Masteriyo LMS product, focusing on its classification as a Learning Management System. The database collects a comprehensive range of defects, including remote code execution flaws, cross-site scripting issues, and authentication bypasses discovered across various Masteriyo releases. It covers vulnerabilities identified from the earliest public reports through the most recent advisories. Readers can use this section to track the vendor’s security posture, analyze the distribution of specific weakness classes, and review the historical record of reported defects for this product without the need to parse individual CVE entries.

Vendor: masteriyo

CVE ID Title CVSS Severity Published
CVE-2026-62132 WordPress Masteriyo - LMS plugin <= 3.4.0 - Broken Access Control vulnerability CWE-862 5.3 Medium 2026-09-11
CVE-2026-62107 WordPress Masteriyo - LMS plugin <= 3.4.0 - PHP Object Injection vulnerability CWE-502 8.8 High 2026-09-11
CVE-2026-73996 WordPress Masteriyo - LMS plugin <= 2.3.2 - Arbitrary File Upload vulnerability CWE-434 9.8 Critical 2026-08-18
CVE-2026-65463 WordPress Masteriyo - LMS plugin <= 2.3.1 - Insecure Direct Object References (IDOR) vulnerability CWE-639 5.4 Medium 2026-07-23
CVE-2026-59513 WordPress Masteriyo - LMS plugin <= 2.3.0 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2026-07-23
CVE-2026-42743 WordPress Masteriyo - LMS plugin <= 2.1.8 - Broken Authentication vulnerability CWE-347 6.5 Medium 2026-06-15
CVE-2026-39524 WordPress Masteriyo - LMS plugin <= 2.1.5 - Payment Bypass vulnerability CWE-862 7.5 High 2026-06-15
CVE-2026-49111 WordPress Masteriyo - LMS plugin <= 2.2.0 - Privilege Escalation vulnerability CWE-266 8.8 High 2026-06-15
CVE-2025-64270 WordPress Masteriyo - LMS plugin <= 2.0.3 - Sensitive Data Exposure vulnerability CWE-497 6.5 Medium 2025-12-18
CVE-2025-54699 WordPress Masteriyo - LMS Plugin plugin <= 1.18.3 - Cross Site Scripting (XSS) Vulnerability CWE-79 6.5 Medium 2025-08-14
CVE-2024-33939 WordPress LMS by Masteriyo plugin <= 1.7.3 - Broken Authentication vulnerability CWE-288 5.3 Medium 2025-05-19
CVE-2024-43158 WordPress Masteriyo LMS plugin <= 1.11.4 - Broken Access Control vulnerability CWE-862 7.5 High 2024-11-01
CVE-2024-43159 WordPress Masteriyo LMS plugin <= 1.11.6 - Broken Access Control vulnerability CWE-862 5.3 Medium 2024-11-01
CVE-2024-43239 WordPress Masteriyo LMS plugin <= 1.11.4 - Insecure Direct Object Reference (IDOR) vulnerability CWE-639 4.3 Medium 2024-08-18
CVE-2024-24882 WordPress LMS by Masteriyo plugin <= 1.7.2 - Privilege Escalation vulnerability CWE-266 9.8 Critical 2024-05-17

All 15 known CVE vulnerabilities affecting Masteriyo - LMS with full Chinese analysis, references, and POCs where available.