WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
learn-manager
Published
2021-08-02
Title
WP LMS < 1.1.5 - Unauthenticated Arbitrary User Field Edition/Creation
Slug
learn-manager
Published
2026-07-07
Title
WP Learn Manager <= 1.1.8 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation and Activation via jslearnmanager_ajax AJAX Action
Slug
learning-management-system
Published
2023-07-10
Title
LMS by Masteriyo < 1.6.8 - Information Exposure
Slug
learning-management-system
Published
2024-04-05
Title
Masteriyo - LMS < 1.7.3 - Unauthenticated Privilege Escalation
Slug
learning-management-system
Published
2024-04-30
Title
Masteriyo - LMS < 1.7.4 - Insecure Direct Object Reference
Slug
learning-management-system
Published
2024-08-07
Title
Masteriyo - LMS < 1.11.5 - Missing Authorization
Slug
learning-management-system
Published
2024-08-07
Title
Masteriyo - LMS < 1.12.0 - Missing Authorization
Slug
learning-management-system
Published
2024-08-12
Title
Masteriyo - LMS < 1.11.5 - Authenticated (Student+) Insecure Direct Object Reference
Slug
learning-management-system
Published
2024-10-28
Title
Masteriyo LMS < 1.13.4 - Subscriber+ Privilege Escalation
Slug
learning-management-system
Published
2024-10-28
Title
Masteriyo LMS – eLearning and Online Course Builder for WordPress < 1.13.4 - Authenticated (Student+) Stored Cross-Site Scripting via Ask a Question Functionality
Slug
learning-management-system
Published
2025-07-30
Title
Masteriyo - LMS < 1.18.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
learning-management-system
Published
2025-11-30
Title
Masteriyo - LMS < 2.0.4 - Authenticated (Subscriber+) Sensitive Information Exposure
Slug
learning-management-system
Published
2026-03-25
Title
Masteriyo LMS < 2.1.7 - Subscriber+ Privilege Escalation
Slug
learning-management-system
Published
2026-04-07
Title
Masteriyo LMS < 2.1.8 - Unauthenticated Authorization Bypass to Arbitrary Order Completion via Stripe Webhook Endpoint
Slug
learning-management-system
Published
2026-04-08
Title
Masteriyo LMS – Online Course Builder for eLearning, LMS & Education < 2.1.6 - Missing Authorization
Slug
learning-management-system
Published
2026-05-28
Title
Masteriyo LMS – LMS Course Builder, Quizzes & Certificates < 2.1.9 - Missing Authorization
Slug
learning-management-system
Published
2026-06-08
Title
Masteriyo LMS < 2.2.1 - Subscriber+ Privilege Escalation
Slug
learning-management-system
Published
2026-06-04
Title
Masteriyo LMS < 2.2.1 - Unauthenticated Course Progress Disclosure and Deletion
Slug
learning-management-system
Published
2026-06-26
Title
Masteriyo LMS < 2.3.0 - Missing Authorization to Authenticated (Student+) Arbitrary Course Announcement Modification
Slug
learning-management-system
Published
2026-07-06
Title
Masteriyo LMS < 2.3.1 - Unauthenticated Arbitrary User Session Termination (Denial of Service)
Slug
learning-management-system
Published
2026-07-21
Title
Masteriyo LMS – LMS Course Builder, Quizzes & Certificates < 2.3.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
learning-management-system
Published
2026-07-22
Title
Masteriyo LMS – LMS Course Builder, Quizzes & Certificates < 2.3.2 - Authenticated (Subscriber+) Insecure Direct Object Reference
Slug
learning-management-system
Published
2026-08-18
Title
Masteriyo LMS – LMS Course Builder, Quizzes & Certificates < 2.3.3 - Unauthenticated Arbitrary File Upload
Slug
learning-management-system
Published
2026-08-14
Title
Masteriyo LMS < 2.3.3 - Instructor+ Stored XSS via Quiz Description
Slug
learning-management-system
Published
2026-09-03
Title
Masteriyo LMS 1.18.0 - 2.3.3 - Instructor+ Stored XSS via Course Custom Fields