Known vulnerabilities in MasterStudy LMS WordPress Plugin – for Online Courses and Education
Learning Management System and eLearning plugin for WordPress. Create easily LMS WordPress website, add and sell Courses, Lessons, Quizzes online.
53Reported vulnerabilities
9.8Highest CVSS score
3.7.42Latest version
10,000+Active installs
What to do now
Update MasterStudy LMS WordPress Plugin – for Online Courses and Education to 3.7.53 or later.
53 of these have a fixed version available. Updating resolves them.
Reported vulnerabilities
| CVE | Severity | Exploit probability |
Affected versions | Fixed in | Published |
|---|---|---|---|---|---|
| CVE-2022-0441 | Critical | 85.3% | Before 2.7.6 | 2.7.6 |
March 7, 2022 |
| CVE-2024-1512 | Critical | 77.6% | 3.2.5 and earlier | 3.2.6 |
February 17, 2024 |
| CVE-2023-4278 | High | 6.2% | Before 3.0.18 | 3.0.18 |
September 11, 2023 |
| CVE-2024-5973 | High | 0.5% | Before 3.3.24 | 3.3.24 |
July 22, 2024 |
| CVE-2024-3136 | Critical | 5.0% | Before 3.3.4 | 3.3.4 |
April 9, 2024 |
| CVE-2024-2411 | Critical | 1.5% | Before 3.3.1 | 3.3.1 |
March 29, 2024 |
| CVE-2024-2409 | Critical | 0.8% | Before 3.3.2 | 3.3.2 |
March 29, 2024 |
| CVE-2026-78284 | Critical | 0.5% | 3.7.42 and earlier | 3.7.43 |
August 24, 2026 |
| CVE-2025-32141 | High | 0.7% | 3.5.28 and earlier | 3.5.29 |
April 4, 2025 |
| CVE-2024-2106 | High | 0.8% | Before 3.2.11 | 3.2.11 |
March 13, 2024 |
| CVE-2026-88843 | High | 0.4% | 3.5.29 to 3.7.49 (inclusive) | 3.7.50 |
September 25, 2026 |
| CVE-2026-81342 | High | 0.3% | Before 3.7.43 | 3.7.43 |
August 27, 2026 |
| CVE-2026-4817 | Medium | 0.6% | 0 to 3.7.25 (inclusive) | 3.7.26 |
April 17, 2026 |
| CVE-2023-35093 | Medium | 0.6% | 3.0.8 and earlier | 3.0.9 |
June 22, 2023 |
| CVE-2026-5060 | Medium | 0.4% | 0 to 3.7.23 (inclusive) | 3.7.24 |
July 29, 2026 |
| CVE-2026-42730 | Medium | 0.4% | 3.7.29 and earlier | 3.7.30 |
May 24, 2026 |
| CVE-2026-40766 | Medium | 0.4% | 3.7.25 and earlier | 3.7.26 |
April 21, 2026 |
| CVE-2025-64366 | Medium | 0.3% | 3.6.27 and earlier | 3.6.28 |
October 23, 2025 |
| CVE-2026-105079 | Medium | 0.2% | 3.7.52 and earlier | 3.7.53 |
October 8, 2026 |
| CVE-2026-81338 | Medium | 0.1% | 3.7.49 and earlier | 3.7.50 |
September 21, 2026 |
| CVE-2026-68568 | Medium | 0.3% | 3.7.41 and earlier | 3.7.42 |
August 18, 2026 |
| CVE-2026-57330 | Medium | 0.2% | 3.7.27 and earlier | 3.7.28 |
June 29, 2026 |
| CVE-2026-0559 | Medium | 0.2% | 0 to 3.7.11 (inclusive) | 3.7.12 |
February 14, 2026 |
| CVE-2024-3942 | Medium | 0.4% | Before 3.3.9 | 3.3.9 |
May 2, 2024 |
| CVE-2023-35090 | Medium | 0.4% | 3.0.7 and earlier | 3.0.9 |
June 22, 2023 |
| CVE-2026-88846 | Medium | 0.2% | 3.7.49 and earlier | 3.7.50 |
September 22, 2026 |
| CVE-2026-81199 | Medium | 0.5% | Before 3.7.46 | 3.7.46 |
September 2, 2026 |
| CVE-2026-81195 | Medium | 0.3% | Before 3.7.46 | 3.7.46 |
September 2, 2026 |
| CVE-2026-81197 | Medium | 0.3% | Before 3.7.46 | 3.7.46 |
August 31, 2026 |
| CVE-2026-81026 | Medium | 0.2% | Before 3.7.40 | 3.7.40 |
August 27, 2026 |
| CVE-2026-28145 | Medium | 0.2% | 3.7.39 and earlier | 3.7.40 |
July 31, 2026 |
| CVE-2025-13766 | Medium | 0.2% | 3.7.6 and earlier | 3.7.7 |
January 5, 2026 |
| CVE-2024-37094 | Medium | 0.4% | 3.2.12 and earlier | 3.2.13 |
June 20, 2024 |
| CVE-2026-88845 | Medium | 0.2% | 3.7.49 and earlier | 3.7.50 |
September 22, 2026 |
| CVE-2026-88847 | Medium | 0.2% | 3.7.49 and earlier | 3.7.50 |
September 22, 2026 |
| CVE-2026-81339 | Medium | 0.2% | 3.7.49 and earlier | 3.7.50 |
September 21, 2026 |
| CVE-2026-88844 | Medium | 0.3% | 3.7.49 and earlier | 3.7.50 |
September 16, 2026 |
| CVE-2026-81340 | Medium | 0.3% | 3.7.49 and earlier | 3.7.50 |
September 16, 2026 |
| CVE-2026-81194 | Medium | 0.3% | Before 3.7.46 | 3.7.46 |
September 2, 2026 |
| CVE-2026-81196 | Medium | 0.3% | Before 3.7.46 | 3.7.46 |
September 2, 2026 |
| CVE-2026-81198 | Medium | 0.3% | Before 3.7.46 | 3.7.46 |
September 2, 2026 |
| CVE-2026-81200 | Medium | 0.3% | Before 3.7.42 | 3.7.42 |
August 29, 2026 |
| CVE-2026-73404 | Medium | 0.3% | 3.7.41 and earlier | 3.7.42 |
August 18, 2026 |
| CVE-2026-57640 | Medium | 0.3% | 3.7.30 and earlier | 3.7.31 |
June 26, 2026 |
| CVE-2025-59575 | Medium | 0.3% | 3.6.20 and earlier | 3.6.21 |
October 16, 2025 |
| CVE-2025-59577 | Medium | 0.2% | 3.6.20 and earlier | 3.6.21 |
September 22, 2025 |
| CVE-2025-59576 | Medium | 0.2% | 3.6.20 and earlier | 3.6.21 |
September 22, 2025 |
| CVE-2025-54744 | Medium | 0.2% | 3.6.15 and earlier | 3.6.16 |
September 3, 2025 |
| CVE-2025-32237 | Medium | 0.4% | 3.5.28 and earlier | 3.5.29 |
April 4, 2025 |
| CVE-2024-37093 | Medium | 0.2% | 3.2.1 and earlier | 3.2.2 |
June 20, 2024 |
| CVE-2024-1904 | Medium | 0.5% | Before 3.3.0 | 3.3.0 |
April 9, 2024 |
| WF-1ddcd2eb-fd7a-48b7-b9ea-3632d49e9734 | Medium | — | 2.9.34 and earlier | 2.9.35 |
April 3, 2023 |
| CVE-2026-88848 | Medium | 0.1% | 1.9 up to (but not including) 3.7.50 | 3.7.50 |
September 25, 2026 |