Product by StylemixThemes

    MasterStudy LMS WordPress Plugin

    18 known vulnerabilities in MasterStudy LMS WordPress Plugin (StylemixThemes), 0 of them actively exploited (CISA KEV).

    Key figures

    18

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    7

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in MasterStudy LMS WordPress Plugin (StylemixThemes)
    CriticalCVE-2024-1512

    StylemixThemes MasterStudy LMS: SQL Injection

    also in 1 other product

    		9.8
    CriticalCVE-2022-0441

    MasterStudy LMS < 2.7.6 - Unauthenticated Admin Account Creation

    		9.8
    CriticalCVE-2024-3136

    MasterStudy LMS <= 3.3.3 - Unauthenticated Local File Inclusion via template

    also in 1 other product

    		9.8
    HighCVE-2023-4278

    MasterStudy LMS < 3.0.18 - Unauthenticated Instructor Account Creation

    		7.5
    CriticalCVE-2024-2411

    MasterStudy LMS <= 3.3.0 - Unauthenticated Local File Inclusion via modal

    also in 1 other product

    		9.8
    CriticalCVE-2024-2409

    MasterStudy LMS <= 3.3.1 - Unauthenticated Privilege Escalation via stm_lms_register AJAX Action

    also in 1 other product

    		9.8
    HighCVE-2026-40766

    WordPress MasterStudy LMS plugin <= 3.7.25 - SQL Injection vulnerability

    		8.5
    CriticalCVE-2024-5973

    MasterStudy LMS < 3.3.24 - Privilege Escalation to Instructor

    		8.8
    MediumCVE-2026-105079

    WordPress MasterStudy LMS plugin <= 3.7.52 - Cross Site Scripting (XSS) vulnerability

    		6.5
    CriticalCVE-2024-37094

    WordPress MasterStudy LMS plugin <= 3.2.12 - Broken Access Control vulnerability

    		8.2
    HighCVE-2024-2106

    StylemixThemes MasterStudy LMS: Exposure of Sensitive Information to an Unauthorized Actor

    also in 1 other product

    		5.3
    MediumCVE-2026-118092

    WordPress MasterStudy LMS plugin <= 3.7.55 - Broken Access Control vulnerability

    		4.3
    MediumCVE-2023-35093

    WordPress MasterStudy LMS Plugin <= 3.0.8 is vulnerable to Broken Access Control

    		6.5
    MediumCVE-2026-28145

    WordPress MasterStudy LMS plugin <= 3.7.39 - Broken Access Control vulnerability

    		5.3
    MediumCVE-2024-3942

    MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.3.8 - Missing Authorization

    also in 1 other product

    		6.3
    MediumCVE-2023-35090

    WordPress MasterStudy LMS Plugin <= 3.0.8 is vulnerable to Cross Site Scripting (XSS)

    		6.5
    MediumCVE-2024-1904

    MasterStudy LMS <= 3.2.13 - Missing Authorization to Sensitive Information Exposure in search_posts

    also in 1 other product

    		4.3
    HighCVE-2024-37093

    WordPress MasterStudy LMS plugin <= 3.2.1 - Cross Site Request Forgery (CSRF) vulnerability

    also in 1 other product

    		4.3

    All products by StylemixThemes