Product by Stylemix
Masterstudy Lms Wordpress Plugin – For Online Courses And Education
11 known vulnerabilities in Masterstudy Lms Wordpress Plugin – For Online Courses And Education (Stylemix), 0 of them actively exploited (CISA KEV).
Key figures
11
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
4
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2024-1512 | StylemixThemes MasterStudy LMS: SQL Injection | 9.8 | |
| Critical | CVE-2024-3136 | MasterStudy LMS <= 3.3.3 - Unauthenticated Local File Inclusion via template | 9.8 | |
| Critical | CVE-2024-2411 | MasterStudy LMS <= 3.3.0 - Unauthenticated Local File Inclusion via modal | 9.8 | |
| Critical | CVE-2024-2409 | MasterStudy LMS <= 3.3.1 - Unauthenticated Privilege Escalation via stm_lms_register AJAX Action | 9.8 | |
| Medium | CVE-2026-5060 | Authorization Bypass Through User-Controlled Key (CVE-2026-5060) | 6.5 | |
| Medium | CVE-2026-4817 | SQL Injection (CVE-2026-4817) | 6.5 | |
| High | CVE-2024-2106 | StylemixThemes MasterStudy LMS: Exposure of Sensitive Information to an Unauthorized Actor | 5.3 | |
| Medium | CVE-2026-0559 | Cross-site Scripting (CVE-2026-0559) | 6.4 | |
| Medium | CVE-2024-3942 | MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.3.8 - Missing Authorization | 6.3 | |
| Medium | CVE-2025-13766 | Missing Authorization (CVE-2025-13766) | 5.4 | |
| Medium | CVE-2024-1904 | MasterStudy LMS <= 3.2.13 - Missing Authorization to Sensitive Information Exposure in search_posts | 4.3 |