PatchTheCVE: masteriyohttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-33939: Authentication Bypass Using an Alternate Path or Channel vulnerability in masteriyo Masteriyo - LMS learning-mhttps://patchthecve.com/cve/CVE-2024-33939.htmlhttps://patchthecve.com/cve/CVE-2024-33939.htmlWed, 17 Jun 2026 07:32:36 +0000MEDIUM 5.3: Authentication Bypass Using an Alternate Path or Channel vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.7.3.CVE-2024-43159: Missing Authorization vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affectshttps://patchthecve.com/cve/CVE-2024-43159.htmlhttps://patchthecve.com/cve/CVE-2024-43159.htmlWed, 17 Jun 2026 07:50:32 +0000MEDIUM 5.3: Missing Authorization vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.11.6.CVE-2024-43158: Missing Authorization vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affectshttps://patchthecve.com/cve/CVE-2024-43158.htmlhttps://patchthecve.com/cve/CVE-2024-43158.htmlWed, 17 Jun 2026 07:50:32 +0000HIGH 7.5: Missing Authorization vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.11.4.CVE-2024-10008: The Masteriyo LMS – eLearning and Online Course Builder for WordPress plugin for WordPress is vulnerable to unhttps://patchthecve.com/cve/CVE-2024-10008.htmlhttps://patchthecve.com/cve/CVE-2024-10008.htmlWed, 17 Jun 2026 06:54:45 +0000HIGH 8.8: The Masteriyo LMS – eLearning and Online Course Builder for WordPress plugin for WordPress is vulnerable to unauthorized user profile modification due to missing authorization checks on the /wp-json/masteriyo/v1/users/$id REST API endpoint in all versions up to, and including, 1.13.3. This makes it CVE-2024-10000: The Masteriyo LMS – eLearning and Online Course Builder for WordPress plugin for WordPress is vulnerable to Sthttps://patchthecve.com/cve/CVE-2024-10000.htmlhttps://patchthecve.com/cve/CVE-2024-10000.htmlWed, 17 Jun 2026 06:54:44 +0000MEDIUM 6.4: The Masteriyo LMS – eLearning and Online Course Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the question's content parameter in all versions up to, and including, 1.13.3 due to insufficient input sanitization and output escaping. This makes it possibleCVE-2024-43239: Authorization Bypass Through User-Controlled Key vulnerability in masteriyo Masteriyo - LMS learning-managemenhttps://patchthecve.com/cve/CVE-2024-43239.htmlhttps://patchthecve.com/cve/CVE-2024-43239.htmlWed, 17 Jun 2026 07:50:39 +0000MEDIUM 4.3: Authorization Bypass Through User-Controlled Key vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.11.4.CVE-2024-24882: Incorrect Privilege Assignment vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issuhttps://patchthecve.com/cve/CVE-2024-24882.htmlhttps://patchthecve.com/cve/CVE-2024-24882.htmlWed, 17 Jun 2026 07:15:09 +0000CRITICAL 9.8: Incorrect Privilege Assignment vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.7.2.