Approved changes feed: RSS · Atom

cpe:2.3:a:masteriyo:masteriyo_-_lms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMasteriyo (1ff9cb6e-81eb-5439-b729-a2cb76f0f19c)
ProductMasteriyo Lms (11e38d96-a95b-5c3c-bf68-22ca12157a69)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-65463 vulnerable 2026-07-29 01:06:20.004664 WordPress Masteriyo - LMS plugin <= 2.3.1 - Insecure Direct Object References (IDOR) vulnerability
MEDIUM (5.4)
Subscriber Insecure Direct Object References (IDOR) in Masteriyo - LMS <= 2.3.1 versions.
Published: 2026-07-23T11:18:41.468Z
Updated: 2026-07-23T13:29:30.902Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64270 vulnerable 2026-06-08 07:39:18.308251 WordPress Masteriyo - LMS plugin <= 2.0.3 - Sensitive Data Exposure vulnerability
MEDIUM (6.5)
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in masteriyo Masteriyo - LMS learning-management-system allows Retrieve Embedded Sensitive Data.This issue affects Masteriyo - LMS: from n/a through <= 2.0.3.
Published: 2025-12-18T07:22:14.865Z
Updated: 2026-04-28T18:28:54.276Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54699 vulnerable 2026-06-08 07:33:13.084036 WordPress Masteriyo - LMS Plugin plugin <= 1.18.3 - Cross Site Scripting (XSS) Vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in masteriyo Masteriyo - LMS learning-management-system allows Stored XSS.This issue affects Masteriyo - LMS: from n/a through <= 1.18.3.
Published: 2025-08-14T10:34:55.202Z
Updated: 2026-04-28T16:13:34.988Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43239 vulnerable 2026-06-08 06:45:49.927709 WordPress Masteriyo LMS plugin <= 1.11.4 - Insecure Direct Object Reference (IDOR) vulnerability
MEDIUM (4.3)
Authorization Bypass Through User-Controlled Key vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.11.4.
Published: 2024-08-18T21:36:10.697Z
Updated: 2026-04-28T16:10:10.170Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43159 vulnerable 2026-06-08 06:45:49.711263 WordPress Masteriyo LMS plugin <= 1.11.6 - Broken Access Control vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.11.6.
Published: 2024-11-01T14:17:42.918Z
Updated: 2026-04-28T16:10:09.481Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43158 vulnerable 2026-06-08 06:45:49.710805 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-33939 vulnerable 2026-06-08 06:37:32.341765 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-24882 vulnerable 2026-06-08 06:29:41.963185 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.