Namaste! LMS

Namaste! LMS has 10 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; 9 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 5.6, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high. 2024 was the busiest year with 5 disclosures.

The most common weakness is Cross-Site Scripting, behind 7 of the records (70%). Other recurring categories include Cross-Site Request Forgery (CSRF), Deserialization Of Untrusted Data.

9 of the records (90%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.

9 independent researchers contributed these findings, most of them (2) reported by Hakiduck.

Strategic Overview

Avg CVSSMedium

5.6/ 10

Patch Coverage90%

Open

Fixed

Get automatic notifications for all Namaste! LMS vulnerabilities before they are exploited.

Most severe open issueCVSS 4.3CVE-2025-27353

Namaste! LMS <= 2.6.5 - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

10 records


2025-02-24 00:00	Namaste! LMS <= 2.6.5 - Cross-Site Request Forgery Namaste! LMS <= 2.6.5	`CVE-2025-27353`	4.3 Medium	Nabil Irawan	No
2024-12-02 00:00	Namaste! LMS <= 2.6.4.1 - Cross-Site Request Forgery Namaste! LMS <= 2.6.4.1	`CVE-2024-53809`	4.3 Medium	a00n	Yes
2024-10-24 00:00	Namaste! LMS <= 2.6.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting Namaste! LMS <= 2.6.4	`CVE-2024-50410`	6.4 Medium	Hazem Brini	Yes
2024-10-24 00:00	Namaste! LMS <= 2.6.3 - Authenticated (Subscriber+) PHP Object Injection Namaste! LMS <= 2.6.3	`CVE-2024-50408`	8.8 High	Kévin Mosbahi (Mika)	Yes
2024-10-24 00:00	Namaste! LMS <= 2.6.2 - Reflected Cross-Site Scripting Namaste! LMS <= 2.6.2	`CVE-2024-50407`	6.1 Medium	Hakiduck	Yes
2024-10-24 00:00	Namaste! LMS <= 2.6.2 - Authenticated (Student+) Stored Cross-Site Scripting Namaste! LMS <= 2.6.2	`CVE-2024-50409`	6.4 Medium	Hakiduck	Yes
2023-11-14 00:00	Namaste! LMS <= 2.6.1.1 - Reflected Cross-Site Scripting Namaste! LMS <= 2.6.1.1	`CVE-2023-4602`	6.1 Medium	Vincenzo Turturro	Yes
2023-03-03 00:00	Namaste! LMS <= 2.5.9.9 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'accept_other_payment_methods', 'other_payment_methods' Parameters Namaste! LMS <= 2.5.9.9	`CVE-2023-0844`	4.4 Medium	Alex Sanford	Yes
2023-01-31 00:00	Namaste! LMS <= 2.5.9.3 - Authenticated (Admin+) Stored Cross-Site Scripting Namaste! LMS <= 2.5.9.3	`CVE-2023-0548`	4.4 Medium	Felipe Restrepo Rodriguez (pfelilpe)	Yes
2023-01-27 00:00	Namaste! LMS <= 2.5.9.1 - Authenticated (Admin+) Stored Cross-Site Scripting Namaste! LMS < 2.5.9.2	`CVE-2023-24383`	4.4 Medium	yuyudhn	Yes

Showing 1–10 of 10 reports