WordPress plugin
Masteriyo LMS – LMS Course Builder, Quizzes & Certificates security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 33 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical2
- High5
- Medium26
- Low0
All Masteriyo LMS – LMS Course Builder, Quizzes & Certificates vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.1 | Unauthenticated PHP Object Injection ≤3.4.0Update to 3.4.1 | CVE-2026-62107 | |
| High7.5 | Authenticated (Subscriber+) PHP Object Injection ≤3.4.0Update to 3.4.1 | CVE-2026-82845 | |
| Critical9.8 | Unauthenticated Arbitrary File Upload ≤2.3.2Update to 2.3.3 | CVE-2026-73996 | |
| High8.8 | Authenticated (Subscriber+) Privilege Escalation ≤2.2.0Update to 2.2.1 | CVE-2026-49111 | |
| High8.8 | Missing Authorization to Authenticated (Student+) Privilege Escalation to Administrator ≤2.1.6Update to 2.1.7 | CVE-2026-4484 | |
| High8.8 | Authenticated (Student+) Missing Authorization to Privilege Escalation ≤1.13.3Update to 1.13.4 | CVE-2024-10008 | |
| Critical9.8 | LMS <= 1.7.2 - Unauthenticated Privilege Escalation ≤1.7.2Update to 1.7.3 | CVE-2024-24882 |
- High8.1Unauthenticated PHP Object Injection
≤3.4.0Update to 3.4.1
- High7.5Authenticated (Subscriber+) PHP Object Injection
≤3.4.0Update to 3.4.1
- Critical9.8Unauthenticated Arbitrary File Upload
≤2.3.2Update to 2.3.3
- High8.8Authenticated (Subscriber+) Privilege Escalation
≤2.2.0Update to 2.2.1
- High8.8Missing Authorization to Authenticated (Student+) Privilege Escalation to Administrator
≤2.1.6Update to 2.1.7
- High8.8Authenticated (Student+) Missing Authorization to Privilege Escalation
≤1.13.3Update to 1.13.4
- Critical9.8LMS <= 1.7.2 - Unauthenticated Privilege Escalation
≤1.7.2Update to 1.7.3
Masteriyo LMS – LMS Course Builder, Quizzes & Certificates: common questions
Does Masteriyo LMS – LMS Course Builder, Quizzes & Certificates have known vulnerabilities?
Yes. VulnCrest Radar lists 33 known vulnerabilities in Masteriyo LMS – LMS Course Builder, Quizzes & Certificates: 2 critical, 5 high, 26 medium. None are known to affect version null.
How do I check which version of Masteriyo LMS – LMS Course Builder, Quizzes & Certificates I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Masteriyo LMS – LMS Course Builder, Quizzes & Certificates vulnerability?
CVE-2026-116410, published Oct 30, 2026: Masteriyo LMS – LMS Course Builder, Quizzes & Certificates <= 3.4.3 - Unauthenticated Arbitrary Content Deletion. Severity: Medium (CVSS 5.3).
Is any Masteriyo LMS – LMS Course Builder, Quizzes & Certificates vulnerability listed in CISA KEV?
No. None of the known Masteriyo LMS – LMS Course Builder, Quizzes & Certificates vulnerabilities is currently listed in the CISA KEV catalog.