ThemeGrill Vulnerabilities and Affected Products
Vulnerabilities associated with Masteriyo - LMS.
Products
Clear product- ColorMag3 vulnerabilities
- Masteriyo - LMS3 vulnerabilities
- Himalayas2 vulnerabilities
- Maintenance Page2 vulnerabilities
- ThemeGrill Demo Importer2 vulnerabilities
- themegrill_demo_importer2 vulnerabilities
- User Registration2 vulnerabilities
- User Registration Stripe2 vulnerabilities
- Zakra2 vulnerabilities
- Accelerate1 vulnerability
- ColorNews1 vulnerability
- Esteem1 vulnerability
- maintenance_page1 vulnerability
- Registration Form for WooCommerce1 vulnerability
- Spacious1 vulnerability
- ThemeGrill Demo Importer plugin for WordPress1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-42743MEDIUM | WordPress Masteriyo - LMS plugin <= 2.1.8 - Broken Authentication vulnerabilityUnauthenticated Broken Authentication in Masteriyo - LMS <= 2.1.8 versions. CWE-347Jun 15, 2026 | CVSS6.5v3.1 | EPSS0.144% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-39524HIGH | WordPress Masteriyo - LMS plugin <= 2.1.5 - Payment Bypass vulnerabilityUnauthenticated Broken Access Control in Masteriyo - LMS <= 2.1.5 versions. CWE-862Jun 15, 2026 | CVSS7.5v3.1 | EPSS0.246% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-49111HIGH | WordPress Masteriyo - LMS plugin <= 2.2.0 - Privilege Escalation vulnerabilityIncorrect Privilege Assignment vulnerability in ThemeGrill Masteriyo - LMS allows Privilege Escalation. This issue affects Masteriyo - LMS: from n/a through 2.2.0. CWE-266Jun 15, 2026 | CVSS8.8v3.1 | EPSS0.238% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |