Masteriyo LMS – LMS Course Builder, Quizzes & Certificates

Уязвимости

• CVE-2026-73996без авторизации≤ 2.3.2

  WordPress Masteriyo - LMS plugin <= 2.3.2 - Arbitrary File Upload vulnerability

  Критич. 9.8

• CVE-2024-24882без авторизации≤ 1.7.2

  WordPress LMS by Masteriyo plugin <= 1.7.2 - Privilege Escalation vulnerability

  Критич. 9.8

• CVE-2026-62107без авторизации≤ 3.4.0

  WordPress Masteriyo - LMS plugin <= 3.4.0 - PHP Object Injection vulnerability

  Высокий 8.8

• CVE-2026-49111нужен вход≤ 2.2.0

  WordPress Masteriyo - LMS plugin <= 2.2.0 - Privilege Escalation vulnerability

  Высокий 8.8

• CVE-2026-4484нужен вход≤ 2.1.6

  Masteriyo LMS <= 2.1.6 - Missing Authorization to Authenticated (Student+) Privilege Escalation to Administrator

  Высокий 8.8

• CVE-2024-43239нужен вход≤ 1.11.4

  WordPress Masteriyo LMS plugin <= 1.11.4 - Insecure Direct Object Reference (IDOR) vulnerability

  Высокий 8.1

• CVE-2026-39524без авторизации≤ 2.1.5

  WordPress Masteriyo - LMS plugin <= 2.1.5 - Payment Bypass vulnerability

  Высокий 7.5

• CVE-2024-43158без авторизации≤ 1.11.4

  WordPress Masteriyo LMS plugin <= 1.11.4 - Broken Access Control vulnerability

  Высокий 7.5

• CVE-2026-42743без авторизации≤ 2.1.8

  WordPress Masteriyo - LMS plugin <= 2.1.8 - Broken Authentication vulnerability

  Средний 6.5

• CVE-2026-59513подписчик+≤ 2.3.0

  WordPress Masteriyo - LMS plugin <= 2.3.0 - Cross Site Scripting (XSS) vulnerability

  Средний 6.5

• CVE-2025-64270нужен вход≤ 2.0.3

  WordPress Masteriyo - LMS plugin <= 2.0.3 - Sensitive Data Exposure vulnerability

  Средний 6.5

• CVE-2025-54699нужен вход≤ 1.18.3

  WordPress Masteriyo - LMS Plugin plugin <= 1.18.3 - Cross Site Scripting (XSS) Vulnerability

  Средний 6.5

• CVE-2024-10008нужен вход≤ 1.13.3

  Masteriyo LMS – eLearning and Online Course Builder for WordPress <= 1.13.3 - Authenticated (Student+) Missing Authorization to Privilege Escalation

  Средний 6.5

• CVE-2026-65463подписчик+≤ 2.3.1

  WordPress Masteriyo - LMS plugin <= 2.3.1 - Insecure Direct Object References (IDOR) vulnerability

  Средний 5.4

• CVE-2024-10000нужен вход≤ 1.13.3

  Masteriyo LMS – eLearning and Online Course Builder for WordPress <= 1.13.3 - Authenticated (Student+) Stored Cross-Site Scripting via Ask a Question Functional

  Средний 5.4

• CVE-2026-8279без авторизации≤ 2.2.0

  Masteriyo LMS <= 2.2.0 - Missing Authorization to Unauthenticated Arbitrary Course Progress Deletion

  Средний 5.3

• CVE-2026-5167без авторизации≤ 2.1.7

  Masteriyo LMS <= 2.1.7 - Unauthenticated Authorization Bypass to Arbitrary Order Completion via Stripe Webhook Endpoint

  Средний 5.3

• CVE-2024-33939без авторизации≤ 1.7.3

  WordPress LMS by Masteriyo plugin <= 1.7.3 - Broken Authentication vulnerability

  Средний 5.3

• CVE-2024-43159без авторизации≤ 1.11.6

  WordPress Masteriyo LMS plugin <= 1.11.6 - Broken Access Control vulnerability

  Средний 5.3

• CVE-2026-62132подписчик+≤ 3.4.0

  WordPress Masteriyo - LMS plugin <= 3.4.0 - Broken Access Control vulnerability

  Средний 5.3

• CVE-2026-11773нужен вход≤ 2.2.1

  Masteriyo LMS <= 2.2.1 - Missing Authorization to Authenticated (Student+) Arbitrary Course Announcement Modification

  Средний 4.3