CVE-2025-53209
CVE-2025-53209 is a critical privilege assignment flaw in Themeisle Masteriyo LMS PRO that allows an attacker to escalate privileges. It affects all versions of the plugin up to and including 2.20.0 and carries a CVSS v3.1 base score of 9.8. No known exploitation or public exploit is reported, and no official fix is documented in the provided sources.
No official fix yet. If none appears within 45 days of first tracking, this entry is removed automatically.
Who is affected
Themeisle Masteriyo LMS PRO versions n/a through 2.20.0
Real-world impact
An attacker could gain elevated privileges on the affected system, potentially leading to full compromise.
Why this severity
The CVSS score reflects a network‑accessible attack with low complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability.
What to do about it
No official fix or mitigation is documented in the sources yet. Monitor the vendor advisory and apply the patch as soon as it is released.
No fix documented in sources
Timeline
- Jun 2, 2026 · Jun 2, 2026PublishedDisclosed and added to the National Vulnerability Database.
- Jul 22, 2026 · 13d agoAdvisory updatedThe NVD record was last revised.