Vulnerabilities

TI-2024-22409 CVE-2024-33939 · GHSA-vfx3-xjmh-f34c

WordPress LMS by Masteriyo plugin <= 1.7.3 - Broken Authentication vulnerability

LOW 32

Authentication Bypass Using an Alternate Path or Channel vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.7.3.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00937 Published 2025-05-19 No fix listed CWE-288

TI-2024-16396 CVE-2024-24882 · GHSA-prmv-r26v-qgx9

WordPress LMS by Masteriyo plugin <= 1.7.2 - Privilege Escalation vulnerability

MEDIUM 53

Incorrect Privilege Assignment vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.7.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02094 Published 2024-05-17 No fix listed CWE-266

TI-2023-03130 CVE-2023-3345 · GHSA-2xrx-pwqh-wmrm

LMS by Masteriyo < 1.6.8 - Information Exposure

LOW 33

The LMS by Masteriyo WordPress plugin before 1.6.8 does not have proper authorization in one some of its REST API endpoints, making it possible for any students to retrieve email addresses of other students

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0197 Published 2023-07-31 Fixed in 1.6.8

Vulnerabilities

Filters

WordPress LMS by Masteriyo plugin <= 1.7.3 - Broken Authentication vulnerability

WordPress LMS by Masteriyo plugin <= 1.7.2 - Privilege Escalation vulnerability

LMS by Masteriyo < 1.6.8 - Information Exposure