Approved changes feed: RSS · Atom

cpe:2.3:a:stylemixthemes:masterstudy_lms_wordpress_plugin_–_for_online_courses_and_education:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorStylemixthemes (a955917c-2229-564b-bd01-1fb4beeda74f)
ProductMasterstudy Lms Wordpress Plugin – For Online Courses And Education (9eb7964d-5726-5d27-9a4f-362b6e237fdd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-35093 vulnerable 2026-06-03 14:52:17.771034 WordPress MasterStudy LMS Plugin <= 3.0.8 is vulnerable to Broken Access Control
MEDIUM (6.5)
Broken Access Control vulnerability in StylemixThemes MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin <= 3.0.8 versions allows any logged-in users, such as subscribers to view the "Orders" of the plugin and get the data related to the order like email, username, and more.
Published: 2023-06-22T11:07:21.020Z
Updated: 2026-04-28T16:08:29.534Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35090 vulnerable 2026-06-03 14:52:17.759414 WordPress MasterStudy LMS Plugin <= 3.0.8 is vulnerable to Cross Site Scripting (XSS)
MEDIUM (6.5)
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in StylemixThemes MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin <= 3.0.7 versions.
Published: 2023-06-22T10:33:16.893Z
Updated: 2026-04-28T16:08:29.430Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.