Skip to content
PluginCanary

Masteriyo LMS - LMS Course Builder, Quizzes & Certificates

by masteriyo · 6,000+ active installs · Checked 3 Nov 2026
Healthy12 Warnings

Healthy: vulnerability published 22 Sep 2026, fixed in 3.4.2.

83/ 100 Canary Score
Sub-scores for Masteriyo LMS - LMS Course Builder, Quizzes & Certificates
Ownership100
Maintenance100
Security60
Support83
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 22 Sep 2026, fixed in 3.4.2. Update to version 3.4.2 or later.22 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 22 Sep 2026, fixed in 3.4.2. Update to version 3.4.2 or later.22 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 12 Sep 2026, fixed in 3.4.1. Update to version 3.4.1 or later.12 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 12 Sep 2026, fixed in 3.4.1. Update to version 3.4.1 or later.12 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 11 Sep 2026, fixed in 3.4.1. Update to version 3.4.1 or later.11 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 10 Sep 2026, fixed in 3.4.1. Update to version 3.4.1 or later.10 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 10 Sep 2026, fixed in 3.4.1. Update to version 3.4.1 or later.10 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 9 Sep 2026, fixed in 3.4.0. Update to version 3.4.0 or later.9 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 6 Sep 2026, fixed in 2.2.1. Update to version 2.2.1 or later.6 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 5 Sep 2026, fixed in 3.4.0. Update to version 3.4.0 or later.5 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 20 Aug 2026, fixed in 2.3.3. Update to version 2.3.3 or later.20 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 18 Aug 2026, fixed in 2.3.3. Update to version 2.3.3 or later.18 Aug 2026Evidence
  • InfoSEC-324 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master10 Sep 2021 to 10 Sep 2021, 1 commits
masteriyo16 Sep 2021 to 26 Oct 2026, 211 commits

2 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
8 days ago
Releases, 24 months
50
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter for Masteriyo LMS - LMS Course Builder, Quizzes & Certificates
Q1 20248
Q2 202411
Q3 20249
Q4 20247
Q1 20256
Q2 20258
Q3 20257
Q4 20257
Q1 20264
Q2 20265
Q3 20267
Q4 20261

Last release 26 Oct 2026. Tested with WordPress 7.1 (current).

Support

83% of 52 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
22 Sep 2026Masteriyo LMS <= 3.4.1 - Authenticated (Subscriber+) Information Exposure4.3<= 3.4.13.4.20
22 Sep 2026Masteriyo LMS <= 3.4.1 - Authenticated (Subscriber+) Insecure Direct Object Reference4.3<= 3.4.13.4.20
12 Sep 2026Masteriyo LMS – LMS Course Builder, Quizzes & Certificates < 3.4.1 - Authenticated (Custom Role+) Stored Cross-Site Scripting6.4< 3.4.13.4.10
12 Sep 2026Masteriyo LMS – LMS Course Builder, Quizzes & Certificates 1.14.0 - 3.4.0 - Authenticated (Custom Role+) Insecure Direct Object Reference4.31.14.0 to 3.4.03.4.10
11 Sep 2026Masteriyo LMS – LMS Course Builder, Quizzes & Certificates <= 3.4.0 - Unauthenticated PHP Object Injection8.1<= 3.4.03.4.10
10 Sep 2026Masteriyo LMS – LMS Course Builder, Quizzes & Certificates <= 3.4.0 - Missing Authorization4.3<= 3.4.03.4.10
10 Sep 2026Masteriyo LMS <= 3.4.0 - Authenticated (Subscriber+) PHP Object Injection7.5<= 3.4.03.4.10
9 Sep 2026Masteriyo LMS – LMS Course Builder, Quizzes & Certificates 1.3.1 - 2.3.3 - Unauthenticated Information Exposure5.31.3.1 to 2.3.33.4.00
6 Sep 2026Masteriyo LMS <= 2.2.0 - Missing Authorization to Unauthenticated Arbitrary Course Progress Deletion5.3<= 2.2.02.2.10
5 Sep 2026Masteriyo LMS – LMS Course Builder, Quizzes & Certificates 1.18.0 - 2.3.3 - Authenticated (Custom Role+) Stored Cross-Site Scripting6.41.18.0 to 2.3.33.4.00
20 Aug 2026Masteriyo LMS – LMS Course Builder, Quizzes & Certificates < 2.3.3 - Authenticated (Custom Role+) Stored Cross-Site Scripting6.4< 2.3.32.3.30
18 Aug 2026Masteriyo LMS – LMS Course Builder, Quizzes & Certificates <= 2.3.2 - Unauthenticated Arbitrary File Upload9.8<= 2.3.22.3.30
22 Jul 2026Masteriyo LMS – LMS Course Builder, Quizzes & Certificates <= 2.3.1 - Authenticated (Subscriber+) Insecure Direct Object Reference4.3<= 2.3.12.3.20
21 Jul 2026Masteriyo LMS – LMS Course Builder, Quizzes & Certificates <= 2.3.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting6.4<= 2.3.02.3.10
6 Jul 2026Masteriyo LMS <= 2.3.0 - Missing Authorization to Unauthenticated User Session Termination5.3<= 2.3.02.3.10
26 Jun 2026Masteriyo LMS <= 2.2.1 - Missing Authorization to Authenticated (Student+) Arbitrary Course Announcement Modification4.3<= 2.2.12.3.00
8 Jun 2026Masteriyo LMS – LMS Course Builder, Quizzes & Certificates <= 2.2.0 - Authenticated (Subscriber+) Privilege Escalation8.8<= 2.2.02.2.10
4 Jun 2026Masteriyo LMS <= 2.2.0 - Missing Authorization to Unauthenticated Course Progress Disclosure and Deletion5.3<= 2.2.02.2.10
28 May 2026Masteriyo LMS – LMS Course Builder, Quizzes & Certificates <= 2.1.8 - Missing Authorization5.3<= 2.1.82.1.90
8 Apr 2026Masteriyo LMS – Online Course Builder for eLearning, LMS & Education <= 2.1.5 - Missing Authorization5.3<= 2.1.52.1.60
7 Apr 2026Masteriyo LMS <= 2.1.7 - Unauthenticated Authorization Bypass to Arbitrary Order Completion via Stripe Webhook Endpoint5.3<= 2.1.72.1.80
25 Mar 2026Masteriyo LMS <= 2.1.6 - Missing Authorization to Authenticated (Student+) Privilege Escalation to Administrator8.8<= 2.1.62.1.70
30 Nov 2025Masteriyo - LMS <= 2.0.3 - Authenticated (Subscriber+) Sensitive Information Exposure4.3<= 2.0.32.0.40
30 Jul 2025Masteriyo - LMS <= 1.18.3 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 1.18.31.18.40
28 Oct 2024Masteriyo LMS – eLearning and Online Course Builder for WordPress <= 1.13.3 - Authenticated (Student+) Stored Cross-Site Scripting via Ask a Question Functionality6.4<= 1.13.31.13.40

Source: Wordfence Intelligence.

Reputation

Lifetime rating 4.8 from 184 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star171
4 star1
3 star2
2 star4
1 star6

Momentum

6,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Masteriyo LMS - LMS Course Builder, Quizzes & Certificates
4 May 2026829
11 May 20263,019
18 May 20263,257
25 May 20261,741
1 Jun 20261,362
8 Jun 20261,186
15 Jun 2026882
22 Jun 20262,934
29 Jun 20263,833
6 Jul 20261,763
13 Jul 20263,278
20 Jul 20262,202
27 Jul 20261,403
3 Aug 20261,207
10 Aug 20263,644
17 Aug 20262,332
24 Aug 20261,450
31 Aug 20264,020
7 Sep 20264,998
14 Sep 20264,244
21 Sep 20262,448
28 Sep 20264,144
5 Oct 20261,931
12 Oct 20261,662
19 Oct 20261,738
26 Oct 20264,896
2 Nov 2026372

Weekly downloads over the last 4 weeks are 12% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

LearnPress - Course WishlistScore 91 · 10,000+Sensei LMS CertificatesScore 91 · 4,000+LifterLMS LabsScore 91 · 2,000+LearnPress - bbPress IntegrationScore 91 · 2,000+Custom Template for LearnDashScore 91 · 1,000+

Facts

Version3.5.0
Authormasteriyo
Added16 Sep 2021
Last updated26 Oct 2026
Active installs6,000+
Requires WordPress6.6
Tested up to7.1.4
Requires PHP7.4
CategoryLearning Management Systems (LMS) > Course Creation & Management
Tagslms, elearning, course builder, online courses, learning management system

Questions

Is Masteriyo LMS - LMS Course Builder, Quizzes & Certificates still maintained?

Masteriyo LMS - LMS Course Builder, Quizzes & Certificates was last updated on 26 Oct 2026. Its Canary status is Healthy.

Is Masteriyo LMS - LMS Course Builder, Quizzes & Certificates safe?

Masteriyo LMS - LMS Course Builder, Quizzes & Certificates has no open unpatched vulnerabilities on record. 24 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Masteriyo LMS - LMS Course Builder, Quizzes & Certificates?

The wordpress.org author is masteriyo. Recent committers: masteriyo, plugin-master. We have recorded no ownership change.

What can I use instead of Masteriyo LMS - LMS Course Builder, Quizzes & Certificates?

Plugins in the same category with a higher Canary Score: LearnPress - Course Wishlist, Sensei LMS Certificates, LifterLMS Labs, LearnPress - bbPress Integration, Custom Template for LearnDash.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue