Product by Stylemix
Masterstudy Lms
15 known vulnerabilities in Masterstudy Lms (Stylemix), 0 of them actively exploited (CISA KEV).
Key figures
15
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-78284 | WordPress MasterStudy LMS plugin <= 3.7.42 - Arbitrary File Deletion vulnerability | 8.6 | |
| High | CVE-2025-32141 | WordPress MasterStudy LMS plugin <= 3.5.28 - Local File Inclusion vulnerability | 8.8 | |
| High | CVE-2026-118090 | WordPress MasterStudy LMS plugin <= 3.7.55 - PHP Object Injection vulnerability | 8.8 | |
| High | CVE-2026-42730 | WordPress MasterStudy LMS plugin <= 3.7.29 - SQL Injection vulnerability | 8.5 | |
| Medium | CVE-2026-73404 | WordPress MasterStudy LMS plugin <= 3.7.41 - Broken Access Control vulnerability | 6.5 | |
| Medium | CVE-2026-68568 | WordPress MasterStudy LMS plugin <= 3.7.41 - Privilege Escalation vulnerability | 6.3 | |
| Medium | CVE-2026-57330 | WordPress MasterStudy LMS plugin <= 3.7.27 - Cross Site Scripting (XSS) vulnerability | 6.5 | |
| High | CVE-2025-64366 | WordPress MasterStudy LMS plugin <= 3.6.27 - SQL Injection vulnerability | 7.6 | |
| Medium | CVE-2025-59576 | WordPress MasterStudy LMS Plugin <= 3.6.20 - Broken Access Control Vulnerability | 6.5 | |
| Medium | CVE-2025-54744 | WordPress MasterStudy LMS plugin <= 3.6.15 - Broken Access Control vulnerability | 6.5 | |
| Medium | CVE-2026-57640 | WordPress MasterStudy LMS plugin <= 3.7.30 - Broken Access Control vulnerability | 4.3 | |
| Medium | CVE-2025-32237 | WordPress MasterStudy LMS plugin <= 3.5.28 - Broken Access Control vulnerability | 4.3 | |
| Medium | CVE-2025-59575 | WordPress MasterStudy LMS plugin <= 3.6.20 - Sensitive Data Exposure vulnerability | 4.9 | |
| Medium | CVE-2025-59577 | WordPress MasterStudy LMS Plugin <= 3.6.20 - Race Condition Vulnerability | 4.3 | |
| High | CVE-2024-37093 | WordPress MasterStudy LMS plugin <= 3.2.1 - Cross Site Request Forgery (CSRF) vulnerability | 4.3 |