Masteriyo vulnerabilities
We track 4 vulnerabilities in Masteriyo products across 3 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on March 26, 2026.
Latest Masteriyo vulnerabilities
- 8.8 High severity
Masteriyo LMS – Online Course Builder for…: Missing Authorization
The Masteriyo LMS plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.1.6. This is due to the plugin allowing a user to update the user role through the 'InstructorsController::prepare_object_for_database' functio
- 7.5 High severity
Masteriyo - LMS: Missing Authorization
Missing Authorization vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.11.4.
- 8.1 High severity
Masteriyo - LMS: Authorization Bypass Through User-Controlled Key
Authorization Bypass Through User-Controlled Key vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.11.4.
- 9.8 Critical severity
Masteriyo - LMS: Incorrect Privilege Assignment
Incorrect Privilege Assignment vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.7.2.