MasterStudy LMS WordPress Plugin – for Online Courses and Education

Уязвимости

• CVE-2024-37094без авторизации≤ 3.2.12

  WordPress MasterStudy LMS plugin <= 3.2.12 - Broken Access Control vulnerability

  Критич. 9.8

• CVE-2024-3136без авторизации≤ 3.3.3

  MasterStudy LMS <= 3.3.3 - Unauthenticated Local File Inclusion via template

  Критич. 9.8

• CVE-2024-2411без авторизации≤ 3.3.0

  MasterStudy LMS <= 3.3.0 - Unauthenticated Local File Inclusion via modal

  Критич. 9.8

• CVE-2024-2409без авторизации≤ 3.3.1

  MasterStudy LMS <= 3.3.1 - Unauthenticated Privilege Escalation via stm_lms_register AJAX Action

  Критич. 9.8

• CVE-2024-1512без авторизации≤ 3.2.5

  MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.5 - Unauthenticated SQL Injection

  Критич. 9.8

• CVE-2024-37093без авторизации · нужен клик≤ 3.2.1

  WordPress MasterStudy LMS plugin <= 3.2.1 - Cross Site Request Forgery (CSRF) vulnerability

  Высокий 8.8

• CVE-2025-32141нужен вход≤ 3.5.28

  WordPress MasterStudy LMS plugin <= 3.5.28 - Local File Inclusion vulnerability

  Высокий 8.8

• CVE-2026-78284без авторизации≤ 3.7.42

  WordPress MasterStudy LMS plugin <= 3.7.42 - Arbitrary File Deletion vulnerability

  Высокий 8.6

• CVE-2026-40766подписчик+≤ 3.7.25

  WordPress MasterStudy LMS plugin <= 3.7.25 - SQL Injection vulnerability

  Высокий 8.5

• CVE-2026-42730нужен вход≤ 3.7.29

  WordPress MasterStudy LMS plugin <= 3.7.29 - SQL Injection vulnerability

  Высокий 8.5

• CVE-2025-64366высокие права≤ 3.6.27

  WordPress MasterStudy LMS plugin <= 3.6.27 - SQL Injection vulnerability

  Высокий 7.6

• CVE-2024-2106без авторизации≤ 3.2.10

  MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.10 - Basic Information Exposure via REST route

  Высокий 7.5

• CVE-2026-73404подписчик+≤ 3.7.41

  WordPress MasterStudy LMS plugin <= 3.7.41 - Broken Access Control vulnerability

  Средний 6.5

• CVE-2026-5060нужен вход≤ 3.7.23

  MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.14 - Insecure Direct Object Reference to Authenticated (Instructor+) Arbitrary Attach

  Средний 6.5

• CVE-2026-57330подписчик+≤ 3.7.27

  WordPress MasterStudy LMS plugin <= 3.7.27 - Cross Site Scripting (XSS) vulnerability

  Средний 6.5

• CVE-2026-4817подписчик+≤ 3.7.25

  MasterStudy LMS <= 3.7.25 - Authenticated (Subscriber+) Time-based Blind SQL Injection via 'order' and 'orderby' Parameters

  Средний 6.5

• CVE-2025-59576нужен вход≤ 3.6.20

  WordPress MasterStudy LMS Plugin <= 3.6.20 - Broken Access Control Vulnerability

  Средний 6.5

• CVE-2025-54744нужен вход≤ 3.6.15

  WordPress MasterStudy LMS plugin <= 3.6.15 - Broken Access Control vulnerability

  Средний 6.5

• CVE-2023-35093нужен вход≤ 3.0.8

  WordPress MasterStudy LMS Plugin <= 3.0.8 is vulnerable to Broken Access Control

  Средний 6.5

• CVE-2026-0559участник+≤ 3.7.11

  MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'stm_lms_courses_gr

  Средний 6.4

• CVE-2026-68568подписчик+≤ 3.7.41

  WordPress MasterStudy LMS plugin <= 3.7.41 - Privilege Escalation vulnerability

  Средний 6.3

• CVE-2023-35090участник+≤ 3.0.7

  WordPress MasterStudy LMS Plugin <= 3.0.8 is vulnerable to Cross Site Scripting (XSS)

  Средний 5.4

• CVE-2026-28145без авторизации≤ 3.7.39

  WordPress MasterStudy LMS plugin <= 3.7.39 - Broken Access Control vulnerability

  Средний 5.3

• CVE-2025-59575высокие права≤ 3.6.20

  WordPress MasterStudy LMS plugin <= 3.6.20 - Sensitive Data Exposure vulnerability

  Средний 4.9

• CVE-2026-57640подписчик+≤ 3.7.30

  WordPress MasterStudy LMS plugin <= 3.7.30 - Broken Access Control vulnerability

  Средний 4.3

• CVE-2025-59577нужен вход≤ 3.6.20

  WordPress MasterStudy LMS Plugin <= 3.6.20 - Race Condition Vulnerability

  Средний 4.3

• CVE-2025-32237нужен вход≤ 3.5.28

  WordPress MasterStudy LMS plugin <= 3.5.28 - Broken Access Control vulnerability

  Средний 4.3

• CVE-2024-1904подписчик+≤ 3.2.13

  MasterStudy LMS <= 3.2.13 - Missing Authorization to Sensitive Information Exposure in search_posts

  Средний 4.3