Filtered by vendor Stylemixthemes Subscriptions
Filtered by product Masterstudy Lms Subscriptions
Total 24 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-35093 1 Stylemixthemes 1 Masterstudy Lms 2025-02-19 6.5 Medium
Broken Access Control vulnerability in StylemixThemes MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin <= 3.0.8 versions allows any logged-in users, such as subscribers to view the "Orders" of the plugin and get the data related to the order like email, username, and more.
CVE-2024-37094 1 Stylemixthemes 1 Masterstudy Lms 2025-01-22 8.2 High
Missing Authorization vulnerability in StylemixThemes MasterStudy LMS allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects MasterStudy LMS: from n/a through 3.2.12.
CVE-2023-35090 1 Stylemixthemes 1 Masterstudy Lms 2024-11-21 6.5 Medium
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in StylemixThemes MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin <= 3.0.7 versions.
CVE-2022-0441 1 Stylemixthemes 1 Masterstudy Lms 2024-11-21 9.8 Critical
The MasterStudy LMS WordPress plugin before 2.7.6 does to validate some parameters given when registering a new account, allowing unauthenticated users to register as an admin