Known vulnerabilities in Stylemix MasterStudy LMS
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-118090 | Subscriber PHP Object Injection in MasterStudy LMS <= 3.7.55 versions | 8.8 High | Oct 30, 2026 |
| CVE-2026-78284 | Unauthenticated Arbitrary File Deletion in MasterStudy LMS <= 3.7.42 versions | 8.6 High | Aug 24, 2026 |
| CVE-2026-73404 | Subscriber Broken Access Control in MasterStudy LMS <= 3.7.41 versions | 6.5 Medium | Aug 18, 2026 |
| CVE-2026-68568 | Subscriber Privilege Escalation in MasterStudy LMS <= 3.7.41 versions | 6.3 Medium | Aug 18, 2026 |
| CVE-2026-57330 | Subscriber Cross Site Scripting (XSS) in MasterStudy LMS <= 3.7.27 versions | 6.5 Medium | Jun 29, 2026 |
| CVE-2026-57640 | Subscriber Broken Access Control in MasterStudy LMS <= 3.7.30 versions | 4.3 Medium | Jun 26, 2026 |
| CVE-2026-42730 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stylemix… | 8.5 High | May 27, 2026 |
| CVE-2025-64366 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stylemix… | 7.6 High | Oct 31, 2025 |
| CVE-2025-59575 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Stylemix MasterStudy LMS… | 4.9 Medium | Oct 22, 2025 |
| CVE-2025-59576 | Missing Authorization vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows… | 6.5 Medium | Sep 22, 2025 |
| CVE-2025-59577 | Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Stylemix… | 4.3 Medium | Sep 22, 2025 |
| CVE-2025-54744 | Missing Authorization vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows… | 6.5 Medium | Sep 5, 2025 |
| CVE-2025-32237 | Missing Authorization vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows… | 4.3 Medium | Apr 4, 2025 |
| CVE-2025-32141 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in… | 8.8 High | Apr 4, 2025 |
| CVE-2024-37093 | Cross-Site Request Forgery (CSRF) vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system… | 4.3 Medium | Jan 2, 2025 |
Other Stylemix products
Motors – Car Dealership & Classified Listings Plugin 15
Cost Calculator Builder 13
Directory Listings WordPress plugin – uListing 12
MasterStudy LMS WordPress Plugin – for Online Courses and Education 11
uListing 11
Motors 5
Pearl – Header Builder 3
WordPress Header Builder Plugin – Pearl 3
MasterStudy LMS WordPress Plugin 2
Motors – Car Dealer, Classifieds & Listing 2
Pearl 2
Booking Calendar | Appointment Booking | BookIt 1