ThemeGrill masteriyo vulnerabilities

Latest ThemeGrill masteriyo CVEs

Newest publication first

1. CVE-2024-33939 WordPress LMS by Masteriyo plugin <= 1.7.3 - Broken Authentication vulnerability

   Published 2025-05-19

   Medium·CVSS 5.3 EPSS 0.94%

   Authentication Bypass Using an Alternate Path or Channel vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.7.3.

2. CVE-2024-24882 WordPress LMS by Masteriyo plugin <= 1.7.2 - Privilege Escalation vulnerability

   Published 2024-05-17

   Critical·CVSS 9.8 EPSS 2.1%

   Incorrect Privilege Assignment vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.7.2.

3. CVE-2023-3345 LMS by Masteriyo < 1.6.8 - Information Exposure

   Published 2023-07-31

   Medium·CVSS 6.5 EPSS 2.0%

   The LMS by Masteriyo WordPress plugin before 1.6.8 does not have proper authorization in one some of its REST API endpoints, making it possible for any students to retrieve email addresses of other students

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.