What’s Vulnerable › Products

Masteriyo LMS vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.

Check whether your Masteriyo LMS version is affected

Latest Masteriyo LMS vulnerabilities

• CVE-2026-82850 — Masteriyo LMS < 3.4.2 - Subscriber+ Quiz Answer Key Disclosure (CVSS 4.3)
• CVE-2026-82849 — Masteriyo LMS < 3.4.2 - Subscriber+ Arbitrary User Course Progress Disclosure via IDOR (CVSS 4.3)
• CVE-2026-82851 — Masteriyo LMS 1.14.0 - 3.4.0 - Instructor+ Arbitrary Post Disclosure via IDOR (CVSS 2.7)
• CVE-2026-82847 — Masteriyo LMS < 3.4.1 - Instructor+ Stored XSS via Course Highlights (CVSS 6.8)
• CVE-2026-82845 — Masteriyo LMS < 3.4.1 - Subscriber+ PHP Object Injection (CVSS 9.9)
• CVE-2026-82848 — Masteriyo LMS 1.3.1 - 2.3.3 - Unauthenticated Course Enrollment Disclosure (CVSS 5.3)
• CVE-2026-82846 — Masteriyo LMS 1.18.0 - 2.3.3 - Instructor+ Stored XSS via Course Custom Fields (CVSS 6.8)
• CVE-2026-19712 — Masteriyo LMS < 2.3.3 - Instructor+ Stored XSS via Quiz Description (CVSS 6.1)
• CVE-2026-13332 — Masteriyo LMS < 2.3.1 - Unauthenticated Arbitrary User Session Termination (Denial of Service) (CVSS 9.1)
• CVE-2026-10824 — Masteriyo LMS < 2.2.1 - Unauthenticated Course Progress Disclosure and Deletion (CVSS 6.5)