Vulnerabilities / MasterStudy LMS
MasterStudy LMS vulnerabilities
Advisories WPSec published for MasterStudy LMS WordPress Plugin – for Online Courses and Education. Other sources may list more. Its attack surface: MasterStudy LMS on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-07 | WPSEC-2026-0497 | MasterStudy LMS <= 3.7.52 - Authenticated (Contributor+) Missing Authorization to Payout Record Creation and Modification | Medium 4.3 | 3.7.53 |
| 2026-10-07 | WPSEC-2026-0496 | MasterStudy LMS <= 3.7.52 - Authenticated (Contributor+) Stored Cross-Site Scripting via Payout Transaction ID | Medium 6.4 | 3.7.53 |
License: CC BY 4.0