Approved changes feed: RSS · Atom

cpe:2.3:a:stylemix:masterstudy_lms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorStylemix (c2170171-f70b-5bf4-89aa-da5048b14251)
ProductMasterstudy Lms (7e6a5552-73ac-5de8-b454-3c39b6a660e3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-57640 vulnerable 2026-07-29 01:03:15.793229 WordPress MasterStudy LMS plugin <= 3.7.30 - Broken Access Control vulnerability
MEDIUM (4.3)
Subscriber Broken Access Control in MasterStudy LMS <= 3.7.30 versions.
Published: 2026-06-26T14:53:15.063Z
Updated: 2026-06-26T15:32:14.383Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-57330 vulnerable 2026-07-29 01:00:29.612967 WordPress MasterStudy LMS plugin <= 3.7.27 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Subscriber Cross Site Scripting (XSS) in MasterStudy LMS <= 3.7.27 versions.
Published: 2026-06-29T13:36:35.137Z
Updated: 2026-06-29T15:09:02.472Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-42730 vulnerable 2026-06-08 08:03:16.612523 WordPress MasterStudy LMS plugin <= 3.7.29 - SQL Injection vulnerability
HIGH (8.5)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows Blind SQL Injection.This issue affects MasterStudy LMS: from n/a through <= 3.7.29.
Published: 2026-05-27T09:49:04.330Z
Updated: 2026-05-27T10:53:08.025Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64366 vulnerable 2026-06-08 07:39:18.433521 WordPress MasterStudy LMS plugin <= 3.6.27 - SQL Injection vulnerability
HIGH (7.6)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows Blind SQL Injection.This issue affects MasterStudy LMS: from n/a through <= 3.6.27.
Published: 2025-10-31T11:42:39.301Z
Updated: 2026-04-28T16:14:14.541Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59577 vulnerable 2026-06-08 07:35:22.367938 WordPress MasterStudy LMS Plugin <= 3.6.20 - Race Condition Vulnerability
MEDIUM (4.3)
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows Leveraging Race Conditions.This issue affects MasterStudy LMS: from n/a through <= 3.6.20.
Published: 2025-09-22T18:25:54.337Z
Updated: 2026-04-28T16:13:52.760Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59576 vulnerable 2026-06-08 07:35:22.367689 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59575 vulnerable 2026-06-08 07:35:22.367346 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54744 vulnerable 2026-06-08 07:33:13.147264 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-32237 vulnerable 2026-06-08 07:18:59.352931 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-32141 vulnerable 2026-06-08 07:18:59.212498 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37093 vulnerable 2026-06-08 06:39:46.572473 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.