Vulnerabilities / MasterStudy LMS WordPress Plugin – for Online Courses and Education
MasterStudy LMS WordPress Plugin – for Online Courses and Education vulnerabilities
Advisories WPSec published for MasterStudy LMS WordPress Plugin – for Online Courses and Education. Other sources may list more. Its attack surface: MasterStudy LMS WordPress Plugin – for Online Courses and Education on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-21 | WPSEC-2026-1287 | MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.54 - Authenticated (Instructor+) Insecure Direct Object Reference to User Profile Name Modification via Manage Students | Medium 4.3 | 3.7.55 |
| 2026-10-07 | WPSEC-2026-0497 | MasterStudy LMS <= 3.7.52 - Authenticated (Contributor+) Missing Authorization to Payout Record Creation and Modification | Medium 4.3 | 3.7.53 |
| 2026-10-07 | WPSEC-2026-0496 | MasterStudy LMS <= 3.7.52 - Authenticated (Contributor+) Stored Cross-Site Scripting via Payout Transaction ID | Medium 6.4 | 3.7.53 |
License: CC BY 4.0