Approved changes feed: RSS · Atom

cpe:2.3:a:masteriyo:masteriyo_-_lms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMasteriyo (1ff9cb6e-81eb-5439-b729-a2cb76f0f19c)
ProductMasteriyo Lms (11e38d96-a95b-5c3c-bf68-22ca12157a69)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-62107 vulnerable 2026-09-16 04:32:52.930333 WordPress Masteriyo - LMS plugin <= 3.4.0 - PHP Object Injection vulnerability
HIGH (8.8)
Unauthenticated PHP Object Injection in Masteriyo - LMS <= 3.4.0 versions.
Published: 2026-09-11T18:12:05.129Z
Updated: 2026-09-11T20:19:11.606Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-62132 vulnerable 2026-09-16 04:32:52.863092 WordPress Masteriyo - LMS plugin <= 3.4.0 - Broken Access Control vulnerability
MEDIUM (5.3)
Subscriber Broken Access Control in Masteriyo - LMS <= 3.4.0 versions.
Published: 2026-09-11T18:12:09.722Z
Updated: 2026-09-11T20:19:11.115Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-65463 vulnerable 2026-07-29 01:06:20.004664 WordPress Masteriyo - LMS plugin <= 2.3.1 - Insecure Direct Object References (IDOR) vulnerability
MEDIUM (5.4)
Subscriber Insecure Direct Object References (IDOR) in Masteriyo - LMS <= 2.3.1 versions.
Published: 2026-07-23T11:18:41.468Z
Updated: 2026-07-23T13:29:30.902Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64270 vulnerable 2026-06-08 07:39:18.308251 WordPress Masteriyo - LMS plugin <= 2.0.3 - Sensitive Data Exposure vulnerability
MEDIUM (6.5)
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in masteriyo Masteriyo - LMS learning-management-system allows Retrieve Embedded Sensitive Data.This issue affects Masteriyo - LMS: from n/a through <= 2.0.3.
Published: 2025-12-18T07:22:14.865Z
Updated: 2026-04-28T18:28:54.276Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54699 vulnerable 2026-06-08 07:33:13.084036 WordPress Masteriyo - LMS Plugin plugin <= 1.18.3 - Cross Site Scripting (XSS) Vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in masteriyo Masteriyo - LMS learning-management-system allows Stored XSS.This issue affects Masteriyo - LMS: from n/a through <= 1.18.3.
Published: 2025-08-14T10:34:55.202Z
Updated: 2026-04-28T16:13:34.988Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43239 vulnerable 2026-06-08 06:45:49.927709 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43159 vulnerable 2026-06-08 06:45:49.711263 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43158 vulnerable 2026-06-08 06:45:49.710805 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-33939 vulnerable 2026-06-08 06:37:32.341765 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-24882 vulnerable 2026-06-08 06:29:41.963185 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.