by Kastro
Paper/Archive/CVE-2025-53209

CVE-2025-53209

Themeisle Masteriyo LMS PRO — WordPress Masteriyo LMS PRO plugin <= 2.20.0 - Privilege Escalation Vulnerability

EPSS 0.3%CVSS 9.8
critical.is priorityof 100
33
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 20.0.200 × 204.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Incorrect Privilege Assignment vulnerability in Themeisle Masteriyo LMS PRO allows Privilege Escalation. This issue affects Masteriyo LMS PRO: from n/a through 2.20.0.

Affected

ProductAffectedFixed inSource
Masteriyo LMS PROn/a – 2.20.0–CNA

Scores by source

Patchstack (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refpatchstack.com/database/wordpress/plugin/learning-management-system-pro/vulnerability/wordpress-masteriyo-lms-pro-2-20-0-privilege-escalation-vulnerability?_s_id=cve