Masterstudy Lms
Approved changes feed: RSS · Atom
cpe:2.3:a:stylemixthemes:masterstudy_lms:*:*:*:*:*:wordpress:*:*
part: a version: * update: *
| Vendor | Stylemixthemes (a955917c-2229-564b-bd01-1fb4beeda74f) |
|---|---|
| Product | Masterstudy Lms (4c3fdb65-dc60-5838-94f4-bf7903ddc125) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-5973 |
vulnerable | 2026-06-08 06:56:18.113404 |
MasterStudy LMS < 3.3.24 - Privilege Escalation to Instructor
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.3.24 does not prevent students from creating instructor accounts, which could be used to get access to functionalities they shouldn't have.
Published: 2024-07-22T06:00:05.733Z
Updated: 2025-08-27T12:00:32.296Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-43990 |
vulnerable | 2026-06-08 06:45:53.363667 |
WordPress Masterstudy LMS Starter theme <= 1.1.8 - Sensitive Data Exposure vulnerability
MEDIUM (5.3)
Insertion of Sensitive Information into Log File vulnerability in StylemixThemes Masterstudy LMS Starter.This issue affects Masterstudy LMS Starter: from n/a through 1.1.8.
Published: 2024-09-25T14:47:29.522Z
Updated: 2026-04-28T16:10:15.116Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3942 |
vulnerable | 2026-06-08 06:43:51.948551 |
MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.3.8 - Missing Authorization
MEDIUM (6.3)
The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability check on several functions in versions up to, and including, 3.3.8. This makes it possible for authenticated attackers, with subscriber level permissions and above, to read and modify content such as course questions, post titles, and taxonomies.
Published: 2024-05-02T16:52:11.285Z
Updated: 2026-04-08T16:57:40.453Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3136 |
vulnerable | 2026-06-08 06:41:52.552894 |
MasterStudy LMS <= 3.3.3 - Unauthenticated Local File Inclusion via template
CRITICAL (9.8)
The MasterStudy LMS plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.3.3 via the 'template' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included.
Published: 2024-04-09T18:59:08.441Z
Updated: 2026-04-08T17:11:02.846Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-37094 |
vulnerable | 2026-06-08 06:39:46.573794 |
WordPress MasterStudy LMS plugin <= 3.2.12 - Broken Access Control vulnerability
HIGH (8.2)
Missing Authorization vulnerability in StylemixThemes MasterStudy LMS allows Exploiting Incorrectly Configured Access Control Security Levels.
This issue affects MasterStudy LMS: from n/a through 3.2.12.
Published: 2024-11-01T13:52:58.720Z
Updated: 2026-04-28T16:09:55.793Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-37093 |
vulnerable | 2026-06-08 06:39:46.573376 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2411 |
vulnerable | 2026-06-08 06:33:31.050614 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2409 |
vulnerable | 2026-06-08 06:33:31.046574 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2106 |
vulnerable | 2026-06-08 06:33:30.354972 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1904 |
vulnerable | 2026-06-08 06:27:14.892653 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1512 |
vulnerable | 2026-06-08 06:25:40.313075 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4278 |
vulnerable | 2026-06-08 06:16:11.976532 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-35093 |
vulnerable | 2026-06-08 06:06:26.546656 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-35090 |
vulnerable | 2026-06-08 06:06:26.542303 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0441 |
vulnerable | 2026-06-08 05:39:10.067365 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.