Masteriyo LMS – LMS Course Builder, Quizzes & Certificates

Vulnerabilities 15Slug learning-management-systemLatest version 2.2.0WordPress.org →

Minimum safe version

2.1.8

Update to 2.1.8 or later to address 15 fixable vulnerabilities

Latest available2.2.0 ✓

N/A

2026-04-08< 2.1.6

Masteriyo LMS – Online Course Builder for eLearning, LMS & Education <= 2.1.5 - Missing Authorization

Wordfence CVE

N/A

2026-03-25< 2.1.7

Masteriyo LMS <= 2.1.6 - Missing Authorization to Authenticated (Student+) Privilege Escalation to Administrator

Wordfence CVE

N/A

2026-04-07< 2.1.8

Masteriyo LMS <= 2.1.7 - Unauthenticated Authorization Bypass to Arbitrary Order Completion via Stripe Webhook Endpoint

Wordfence CVE

Medium 6.5

2025-12-18< 2.0.4

CVE-2025-64270

CVE Wordfence

Medium 6.5

2025-08-14< 1.18.4

CVE-2025-54699

CVE EUVD Patchstack Wordfence

Medium 6.4

2024-10-29< 1.13.4

CVE-2024-10000

CVE Wordfence Patchstack

High 8.8

2024-10-29< 1.13.4

CVE-2024-10008

CVE Wordfence Patchstack

Medium 4.3

2024-08-18< 1.11.5

CVE-2024-43239

CVE Patchstack Wordfence

High 7.5

2024-11-01< 1.11.5

CVE-2024-43158

CVE Patchstack Wordfence

Medium 5.3

2024-11-01< 1.12.0

CVE-2024-43159

CVE Patchstack Wordfence

Medium 5.3

2025-05-19< 1.7.4

CVE-2024-33939

CVE EUVD Patchstack Wordfence

Critical 9.8

2024-05-17< 1.7.3

CVE-2024-24882

CVE Wordfence Patchstack

Medium 6.5

2023-07-31< 1.6.8

CVE-2023-3345

CVE WPScan

N/A

2023-07-06< 1.6.8

WordPress Masteriyo - LMS Plugin < 1.6.8 is vulnerable to Sensitive Data Exposure

Patchstack

N/A

2023-07-03< 1.6.8

Masteriyo - LMS for WordPress <= 1.6.7 - Sensitive Information Exposure

Wordfence