WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
masterbip-for-elementor
Published
2024-10-31
Title
MasterBip para Elementor <= 1.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mastercurrency-wp
Published
2024-07-26
Title
Master Currency WP <= 1.1.61 - Authenticated (Contributor+) Stored Cross-Site Scripting via Currency Converter Form Shortcode
Slug
masterslider
Published
2023-11-07
Title
Master Slider Pro <= 3.6.5 - Unauthenticated PHP Object Injection
Slug
masterslider
Published
2023-11-07
Title
Master Slider Pro <= 3.6.5 - Reflected Cross-Site Scripting
Slug
masterslider
Published
2023-11-07
Title
Master Slider Pro <= 3.6.5 - Authenticated (Editor+) SQL Injection
Slug
masterslider
Published
2025-10-27
Title
Master Slider Pro <= 3.7.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
masterstudy-elementor-widgets
Published
2024-06-27
Title
Masterstudy Elementor Widgets < 1.2.3 - Missing Authorization
Slug
masterstudy-elementor-widgets
Published
2025-10-12
Title
Masterstudy Elementor Widgets < 1.2.5 - Missing Authorization
Slug
masterstudy-elementor-widgets
Published
2025-10-12
Title
Masterstudy Elementor Widgets < 1.2.5 - Missing Authorization
Slug
masterstudy-lms-learning-management-system
Published
2022-02-01
Title
MasterStudy LMS < 2.7.6 - Unauthenticated Admin Account Creation
Slug
masterstudy-lms-learning-management-system
Published
2023-06-15
Title
MasterStudy LMS < 3.0.9 - Contributor+ Stored XSS
Slug
masterstudy-lms-learning-management-system
Published
2023-06-15
Title
MasterStudy LMS < 3.0.9 - Subscriber+ Course Category Creation
Slug
masterstudy-lms-learning-management-system
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
masterstudy-lms-learning-management-system
Published
2023-08-21
Title
MasterStudy LMS < 3.0.18 - Unauthenticated Instructor Account Creation
Slug
masterstudy-lms-learning-management-system
Published
2024-02-16
Title
MasterStudy LMS WordPress Plugin – for Online Courses and Education < 3.2.6 - Unauthenticated SQL Injection
Slug
masterstudy-lms-learning-management-system
Published
2024-03-06
Title
MasterStudy LMS WordPress Plugin – for Online Courses and Education < 3.2.11 - Basic Information Exposure via REST route
Slug
masterstudy-lms-learning-management-system
Published
2024-03-15
Title
MasterStudy LMS < 3.3.0 - Missing Authorization to Sensitive Information Exposure in search_posts
Slug
masterstudy-lms-learning-management-system
Published
2024-03-28
Title
MasterStudy LMS < 3.3.1 - Unauthenticated Local File Inclusion via modal
Slug
masterstudy-lms-learning-management-system
Published
2024-03-28
Title
MasterStudy LMS < 3.3.2 - Unauthenticated Privilege Escalation
Slug
masterstudy-lms-learning-management-system
Published
2024-04-04
Title
MasterStudy LMS < 3.3.4 - Unauthenticated Local File Inclusion via template
Slug
masterstudy-lms-learning-management-system
Published
2024-04-29
Title
MasterStudy LMS WordPress Plugin – for Online Courses and Education < 3.3.9 - Missing Authorization
Slug
masterstudy-lms-learning-management-system
Published
2024-07-01
Title
MasterStudy LMS < 3.3.24 - Privilege Escalation to Instructor
Slug
masterstudy-lms-learning-management-system
Published
2024-06-20
Title
MasterStudy LMS < 3.2.13 - Missing Authorization
Slug
masterstudy-lms-learning-management-system
Published
2024-06-20
Title
MasterStudy LMS < 3.2.2 - Cross-Site Request Forgery
Slug
masterstudy-lms-learning-management-system
Published
2025-04-04
Title
MasterStudy LMS < 3.5.29 - Missing Authorization