Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 61
Reset filtersMasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.30 - Missing Authorization
MasterStudy LMS Pro Plus <= 4.8.20 - Authenticated (Instructor+) SQL Injection via 'columns' Parameter
MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.29 - Authenticated (Subscriber+) SQL Injection
MasterStudy LMS Pro < 4.7.16 - Missing Authorization
MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.25 - Authenticated (Subscriber+) SQL Injection
MasterStudy LMS <= 3.7.25 - Authenticated (Subscriber+) Time-based Blind SQL Injection via 'order' and 'orderby' Parameters
MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'stm_lms_courses_grid_display' Shortcode
MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.6 Missing Authorization to Authenticated (Subscriber+) Posts and Media Creation, Modification and Deletion
MasterStudy LMS <= 3.6.27 - Authenticated (Instructor+) SQL Injection
MasterStudy LMS <= 3.6.20 - Authenticated (Instructor+) Sensitive Information Exposure
MasterStudy LMS Pro < 4.7.16 - Missing Authorization to Unauthenticated Arbitrary Content Deletion
MasterStudy LMS Pro < 4.7.16 - Authenticated (Subscriber+) Information Exposure
MasterStudy LMS Pro < 4.7.16 - Missing Authorization
MasterStudy LMS <= 3.6.20 - Missing Authorization
MasterStudy LMS <= 3.6.20 - Authenticated (Subscriber+) Race Condition to Multiple Reviews
MasterStudy LMS <= 3.6.15 - Missing Authorization
MasterStudy LMS – Online Courses, eLearning PRO Plus <= 4.7.9 - Authenticated (Subscriber+) Arbitrary File Upload
MasterStudy LMS Pro <= 4.7.0 - Authenticated (Subscriber+) Arbitrary File Upload
MasterStudy LMS <= 3.5.28 - Missing Authorization
MasterStudy LMS <= 3.5.28 - Authenticated (Contributor+) Local File Inclusion
MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.3.23 - Unauthenticated Limited Privilege Escalation to Instructor
MasterStudy LMS <= 3.2.1 - Cross-Site Request Forgery
MasterStudy LMS <= 3.2.12 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.