masteriyo

Records18All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

masteriyo records in CISA KEV

No masteriyo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Masteriyo 5 records MEDIUM

Records

5 records in Masteriyo · all components

TI-2024-09288 CVE-2024-10008 · GHSA-x599-839j-7f7f

Missing authorization in Masteriyo LMS – Online Course Builder for eLearning, LMS &…

MEDIUM 41

The Masteriyo LMS – eLearning and Online Course Builder for WordPress plugin for WordPress is vulnerable to unauthorized user profile modification due to missing authorization checks on the /wp-json/masteriyo/v1/users/$i…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00631 Published 2024-10-29 No fix listed CWE-862

TI-2024-28829 CVE-2024-43158 · GHSA-h8w4-623w-34f7

WordPress Masteriyo LMS plugin <= 1.11.4 - Broken Access Control vulnerability

LOW 39

Missing Authorization vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.11.4.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00522 Published 2024-11-01 No fix listed CWE-862

TI-2024-28892 CVE-2024-43239 · GHSA-2439-66f5-gjjr

WordPress Masteriyo LMS plugin <= 1.11.4 - Insecure Direct Object Reference (IDOR) vulnerability

LOW 35

Authorization Bypass Through User-Controlled Key vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.11.4.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00292 Published 2024-08-18 No fix listed CWE-639

TI-2024-28830 CVE-2024-43159 · GHSA-f6j4-p58v-f3qw

WordPress Masteriyo LMS plugin <= 1.11.6 - Broken Access Control vulnerability

LOW 30

Missing Authorization vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.11.6.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0042 Published 2024-11-01 No fix listed CWE-862

TI-2024-09280 CVE-2024-10000 · GHSA-f7gw-gr5r-rr7w

Cross-site scripting in Masteriyo LMS – Online Course Builder for eLearning, LMS &…

LOW 28

The Masteriyo LMS – eLearning and Online Course Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the question's content parameter in all versions up to, and including, 1.13.3 du…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0028 Published 2024-10-29 No fix listed CWE-79

Open these records in search →

Critical	1
High	5
Medium	12
Low	0
No CVSS	0