WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
masterstudy-lms-learning-management-system
Published
2026-08-31
Title
MasterStudy LMS < 3.7.46 - Unauthenticated Student Statistics Disclosure via student/stats REST Route
Slug
masterstudy-lms-learning-management-system
Published
2026-08-31
Title
MasterStudy LMS < 3.7.46 - Subscriber+ Cross-Instructor Order Data Disclosure via author_id Parameter
Slug
masterstudy-lms-learning-management-system
Published
2026-08-31
Title
MasterStudy LMS < 3.7.46 - Unauthenticated Student Enrollment Disclosure via student-courses REST Route
Slug
masterstudy-lms-learning-management-system
Published
2026-09-16
Title
MasterStudy LMS < 3.7.50 - Instructor+ Order Status Manipulation via IDOR
Slug
masterstudy-lms-learning-management-system
Published
2026-09-16
Title
MasterStudy LMS 3.6.2 - < 3.7.50 - Instructor+ Student PII Disclosure via IDOR
Slug
masterstudy-lms-learning-management-system
Published
2026-08-24
Title
MasterStudy LMS WordPress Plugin – for Online Courses and Education < 3.7.43 - Unauthenticated Arbitrary File Deletion
Slug
masterstudy-lms-learning-management-system
Published
2026-09-21
Title
MasterStudy LMS < 3.7.50 - Subscriber+ Stored HTML Injection via Course Discussions
Slug
masterstudy-lms-learning-management-system
Published
2026-10-08
Title
MasterStudy LMS WordPress Plugin – for Online Courses and Education < 3.7.53 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
masterstudy-lms-learning-management-system
Published
2026-09-21
Title
MasterStudy LMS < 3.7.50 - Subscriber+ Quiz Attempt Grade Disclosure via IDOR
Slug
masterstudy-lms-learning-management-system
Published
2026-09-22
Title
MasterStudy LMS 3.5.29 - < 3.7.50 - Contributor+ LFI via Elementor Courses Categories Widget
Slug
masterstudy-lms-learning-management-system
Published
2026-09-22
Title
MasterStudy LMS 2.3.0 - < 3.7.50 - Subscriber+ Course and Lesson Creation via Demo Import
Slug
masterstudy-lms-learning-management-system
Published
2026-09-22
Title
MasterStudy LMS 2.3.0 - < 3.7.50 - Unauthenticated Account Creation with Registration Disabled
Slug
masterstudy-lms-learning-management-system
Published
2026-09-22
Title
MasterStudy LMS < 3.7.50 - Subscriber+ Lesson Completion Record Creation
Slug
masterstudy-lms-learning-management-system
Published
2026-09-22
Title
MasterStudy LMS 1.9 - < 3.7.50 - Subscriber+ Membership Plan Quota and Category Restriction Bypass
Slug
masterstudy-lms-learning-management-system
Published
2026-10-29
Title
MasterStudy LMS WordPress Plugin – for Online Courses and Education < 3.7.56 - Missing Authorization
Slug
masterstudy-lms-learning-management-system
Published
2026-10-29
Title
MasterStudy LMS WordPress Plugin – for Online Courses and Education < 3.7.50 - Authenticated (Custom+) Path Traversal
Slug
masterstudy-lms-learning-management-system
Published
2026-10-29
Title
MasterStudy LMS WordPress Plugin – for Online Courses and Education < 3.7.50 - Missing Authorization
Slug
masterstudy-lms-learning-management-system
Published
2026-10-20
Title
MasterStudy LMS 3.7.13 - 3.7.54 - Instructor+ Arbitrary User Display Name Update via Student Enrollment
Slug
masterstudy-lms-learning-management-system
Published
2026-10-30
Title
MasterStudy LMS WordPress Plugin – for Online Courses and Education < 3.7.56 - Authenticated (Subscriber+) PHP Object Injection
Slug
masterstudy-lms-learning-management-system-pro
Published
2025-05-27
Title
MasterStudy LMS Pro < 4.7.1 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
masterstudy-lms-learning-management-system-pro
Published
2025-07-17
Title
MasterStudy LMS – Online Courses, eLearning PRO Plus < 4.7.10 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
masterstudy-lms-learning-management-system-pro
Published
2025-10-12
Title
MasterStudy LMS Pro < 4.7.16 - Missing Authorization
Slug
masterstudy-lms-learning-management-system-pro
Published
2025-10-12
Title
MasterStudy LMS Pro < 4.7.16 - Authenticated (Subscriber+) Information Exposure
Slug
masterstudy-lms-learning-management-system-pro
Published
2025-10-12
Title
MasterStudy LMS Pro < 4.7.16 - Missing Authorization to Unauthenticated Arbitrary Content Deletion
Slug
masterstudy-lms-learning-management-system-pro
Published
2026-04-23
Title
MasterStudy LMS Pro < 4.7.16 - Missing Authorization