MasterStudy LMS Pro

MasterStudy LMS Pro has 7 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; all 7 are fixed as of September 2026. Their average CVSS score is 6.0, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 2 high. 2025 was the busiest year with 5 disclosures.

The most common weakness is Missing Authorization, behind 3 of the records (43%). Other recurring categories include Unrestricted Upload Of File With Dangerous Type, Exposure Of Sensitive Information To An Unauthorized Actor.

Every one of the 7 issues recorded for MasterStudy LMS Pro has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, most of them (5) reported by Rafie Muhammad.

Strategic Overview

Avg CVSSMedium

6.0/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all MasterStudy LMS Pro vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2025-4800

MasterStudy LMS Pro <= 4.7.0 - Authenticated (Subscriber+) Arbitrary File Upload

Read the full analysis

Vulnerability Records

7 records


2026-06-03 11:45	MasterStudy LMS Pro Plus <= 4.8.20 - Authenticated (Instructor+) SQL Injection via 'columns' Parameter MasterStudy LMS Pro <= 4.8.20	`CVE-2026-8653`	6.5 Medium	Rafie Muhammad	Yes
2026-04-23 00:00	MasterStudy LMS Pro < 4.7.16 - Missing Authorization MasterStudy LMS Pro < 4.7.16	`CVE-2025-64215`	5.3 Medium	Rafie Muhammad	Yes
2025-10-12 00:00	MasterStudy LMS Pro < 4.7.16 - Missing Authorization MasterStudy LMS Pro < 4.7.16	`CVE-2025-64212`	4.3 Medium	Rafie Muhammad	Yes
2025-10-12 00:00	MasterStudy LMS Pro < 4.7.16 - Authenticated (Subscriber+) Information Exposure MasterStudy LMS Pro < 4.7.16	`CVE-2025-64213`	4.3 Medium	Rafie Muhammad	Yes
2025-10-12 00:00	MasterStudy LMS Pro < 4.7.16 - Missing Authorization to Unauthenticated Arbitrary Content Deletion MasterStudy LMS Pro < 4.7.16	`CVE-2025-64214`	5.3 Medium	Rafie Muhammad	Yes
2025-07-17 00:00	MasterStudy LMS – Online Courses, eLearning PRO Plus <= 4.7.9 - Authenticated (Subscriber+) Arbitrary File Upload MasterStudy LMS Pro <= 4.7.9	`CVE-2025-7438`	7.5 High	Thái An	Yes
2025-05-27 16:26	MasterStudy LMS Pro <= 4.7.0 - Authenticated (Subscriber+) Arbitrary File Upload MasterStudy LMS Pro <= 4.7.0	`CVE-2025-4800`	8.8 High	Foxyyy	Yes

Showing 1–7 of 7 reports