CVE-2025-53209

CriticalCVSS 9.8

Published: 02/06/2026(UTC)Updated: 22/07/2026(UTC)Translated: 23/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.28%

20th percentile - higher than 20% of all known CVEs

Summary

Incorrect privilege assignment in Themeisle's Masteriyo LMS PRO allows privilege escalation.

Risk Assessment

An attacker could gain higher privileges in the system, potentially leading to unauthorized access to administrative functions and data.

Recommendation

Update Masteriyo LMS PRO to a version later than 2.20.0, which includes a fix for this vulnerability.

Original NVD description (English source)

Incorrect Privilege Assignment vulnerability in Themeisle Masteriyo LMS PRO allows Privilege Escalation. This issue affects Masteriyo LMS PRO: from n/a through 2.20.0.