Plugin icon

Masteriyo LMS – Online Course Builder for eLearning, LMS & Education

learning-management-system

Vulnerabilities:

11

Last Updated:

March 25, 2026

Active Installs:

4000

Published
Title
Fixed in
CVSS
Published
2026-03-25
Title
Masteriyo LMS < 2.1.7 - Subscriber+ Privilege Escalation
Fixed in
Fixed in 2.1.7
CVSS
8.8 (high)
Published
2025-11-30
Title
Masteriyo - LMS < 2.0.4 - Authenticated (Subscriber+) Sensitive Information Exposure
Fixed in
Fixed in 2.0.4
CVSS
4.3 (medium)
Published
2025-07-30
Title
Masteriyo - LMS < 1.18.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.18.4
CVSS
6.4 (medium)
Published
2024-10-28
Title
Masteriyo LMS – eLearning and Online Course Builder for WordPress < 1.13.4 - Authenticated (Student+) Stored Cross-Site Scripting via Ask a Question Functionality
Fixed in
Fixed in 1.13.4
CVSS
6.4 (medium)
Published
2024-10-28
Title
Masteriyo LMS < 1.13.4 - Subscriber+ Privilege Escalation
Fixed in
Fixed in 1.13.4
CVSS
8.8 (high)
Published
2024-08-12
Title
Masteriyo - LMS < 1.11.5 - Authenticated (Student+) Insecure Direct Object Reference
Fixed in
Fixed in 1.11.5
CVSS
5.3 (medium)
Published
2024-08-07
Title
Masteriyo - LMS < 1.11.5 - Missing Authorization
Fixed in
Fixed in 1.11.5
CVSS
5.3 (medium)
Published
2024-08-07
Title
Masteriyo - LMS < 1.12.0 - Missing Authorization
Fixed in
Fixed in 1.12.0
CVSS
5.3 (medium)
Published
2024-04-30
Title
Masteriyo - LMS < 1.7.4 - Insecure Direct Object Reference
Fixed in
Fixed in 1.7.4
CVSS
5.3 (medium)
Published
2024-04-05
Title
Masteriyo - LMS < 1.7.3 - Unauthenticated Privilege Escalation
Fixed in
Fixed in 1.7.3
CVSS
9.8 (critical)
Published
2023-07-10
Title
LMS by Masteriyo < 1.6.8 - Information Exposure
Fixed in
Fixed in 1.6.8
CVSS
6.5 (medium)