WordPress Vulnerability Scanner WPSec
Vulnerabilities / Masteriyo LMS – LMS Course Builder, Quizzes & Certificates

Masteriyo LMS – LMS Course Builder, Quizzes & Certificates vulnerabilities

Advisories WPSec published for Masteriyo LMS – LMS Course Builder, Quizzes & Certificates. Other sources may list more. Its attack surface: Masteriyo LMS – LMS Course Builder, Quizzes & Certificates on WPSec AttackSurface.

PublishedIDVulnerabilitySeverityFixed in
2026-10-27 WPSEC-2026-1777 Masteriyo LMS – LMS Course Builder, Quizzes & Certificates <= 3.4.3 - Authenticated (Subscriber+) Insecure Direct Object Reference to Course Progress Meta Modification via 'course_progress_item_id' Parameter Medium 4.3 3.5.0
2026-10-27 WPSEC-2026-1776 Masteriyo LMS – LMS Course Builder, Quizzes & Certificates <= 3.4.3 - Authenticated (Subscriber+) Missing Authorization to Course Progress Item Completion Medium 4.3 3.5.0
2026-10-27 WPSEC-2026-1775 Masteriyo LMS – LMS Course Builder, Quizzes & Certificates <= 3.4.3 - Unauthenticated Authentication Bypass via Webhook Action Endpoint Low 3.7 3.5.0

License: CC BY 4.0