MasterStudy LMS WordPress Plugin – for Online Courses and Education

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 70% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Modeled within the band wp.org reports; tightens as we track daily.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. The recent download trend is too spiky to read.

1. ★★★★★ rauljoselito

   1mo ago

   We are a church and non-profit organization, and MasterStudy LMS has been a fantastic solution for us. The plugin offers a wide range of features that make it easy to create and manage online courses, even for a small team with limited technical experience. We especially appreciate the clean course builder, flexible lesson formats (video, quizzes, assignments, etc.), student management tools, and the ability to offer free or paid courses. It has helped us deliver Bible studies, training programs, and discipleship courses to our congregation and online community in a professional yet easy-to-use way. The mobile-friendly design is also a big plus for our members. Setup was straightforward, documentation is helpful, and the support team has been responsive when we’ve had questions. For any church, ministry, or non-profit looking for a powerful yet affordable LMS, I highly recommend MasterStudy LMS.

   Read on wp.org ↗
2. ★★★★★ fcassou

   2mo ago

   Very interesting plugin with audio integration!

   Read on wp.org ↗
3. ★★★★★ bonigantile

   3mo ago

   Works very well

   Read on wp.org ↗
4. ★★★★★ jhaaloky2k

   3mo ago

   I am satisfied with customer support. also working smooth on wordpress site.

   Read on wp.org ↗
5. ★★★★★ bmde

   3mo ago

   I’ve been using your plugins for over two years now especially Cost Calculator in my parking reservation and international package delivery businesses, and I love the technology and simplicity you’ve built into these tools. I encourage you to take it even further and create, for example, an accommodation booking tool like one for booking a hotel for someone who wants to build a site similar to Airbnb or Booking.com. That would help a lot of people expand their businesses. In any case, I love your work and the responsiveness of your customer service team, who are always ready to help and respond very quickly.

   Read on wp.org ↗
6. ★★★★★ psycopyme

   4mo ago

   Llevo años utilizando MasterStudy y la verdad me ha gustado mucho. A diferencia de otros LMS que he probado para WordPress, este me ha dejado fascinado: No te rompe páginas, es sencillo de entender y utilizar, su documentación ayuda mucho, escuchan a su comunidad y lo mejor es que actualizan seguido. ¡Bien por este sistema!

   Read on wp.org ↗
7. ★★★★★ wathiqoon

   4mo ago

   Outstanding support and various features that meet all your LMS needs.

   Read on wp.org ↗
8. ★★★★★ mrewbie65812

   4mo ago

   Thanks Bill for your super prompt and informative support MS Pro Plus isn’t the most intuitive plugin around and sometimes the help files are outdated. All the more important that tech support is up to date and available —a BIG improvement compared with when I first started with MasterStudy!

   Read on wp.org ↗

Recent releases and news for this plugin

1. 2026-08-21 Version 3.7.44 Fix: Minor bugfixes 3.7.44
2. 2026-08-19 Version 3.7.43 Fix: Minor bugfixes 3.7.43
3. 2026-08-13 Version 3.7.42 Fix: Minor bugfixes 3.7.42
4. 2026-08-04 Version 3.7.41 New: Added Lesson Notes feature in Course Player, students can create, save and manage notes for lessons directly from their profile [PRO] 3.7.41
5. 2026-07-30 Version 3.7.40 Fix: Minor bugfixes 3.7.40
6. 2026-07-28 Version 3.7.39 New: 10 Premium Prebuilt Website Templates added [PRO] 3.7.39

34 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 6.3 MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.41 - Authenticated (Subscriber+) Privilege Escalation ↗
   2026-08-18 CVE-2026-68568 Improper Privilege Management Affects <= 3.7.41 Patched in 3.7.42
2. Medium · 4.3 MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.41 - Missing Authorization ↗
   2026-08-18 CVE-2026-73404 Missing Authorization Affects <= 3.7.41 Patched in 3.7.42
3. Medium · 5.3 MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.39 - Missing Authorization ↗
   2026-07-31 CVE-2026-28145 Missing Authorization Affects <= 3.7.39 Patched in 3.7.40
4. Medium · 6.5 MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.14 - Insecure Direct Object Reference to Authenticated (Instructor+) Arbitrary Attachment Deletion ↗
   2026-07-28 CVE-2026-5060 Authorization Bypass Through User-Controlled Key Affects <= 3.7.23 Patched in 3.7.24
5. Medium · 6.4 MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.27 - Authenticated (Subscriber+) Stored Cross-Site Scripting ↗
   2026-06-29 CVE-2026-57330 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.7.27 Patched in 3.7.28
6. Medium · 4.3 MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.30 - Missing Authorization ↗
   2026-06-26 CVE-2026-57640 Missing Authorization Affects <= 3.7.30 Patched in 3.7.31
7. Medium · 6.5 MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.29 - Authenticated (Subscriber+) SQL Injection ↗
   2026-05-24 CVE-2026-42730 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.7.29 Patched in 3.7.30
8. Medium · 6.5 MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.25 - Authenticated (Subscriber+) SQL Injection ↗
   2026-04-21 CVE-2026-40766 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.7.25 Patched in 3.7.26
9. Medium · 6.5 MasterStudy LMS <= 3.7.25 - Authenticated (Subscriber+) Time-based Blind SQL Injection via 'order' and 'orderby' Parameters ↗
   2026-04-16 CVE-2026-4817 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.7.25 Patched in 3.7.26
10. Medium · 6.4 MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'stm_lms_courses_grid_display' Shortcode ↗
    2026-02-13 CVE-2026-0559 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.7.11 Patched in 3.7.12
11. Medium · 5.4 MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.6 Missing Authorization to Authenticated (Subscriber+) Posts and Media Creation, Modification and Deletion ↗
    2026-01-05 CVE-2025-13766 Missing Authorization Affects <= 3.7.6 Patched in 3.7.7
12. Medium · 6.5 MasterStudy LMS <= 3.6.27 - Authenticated (Instructor+) SQL Injection ↗
    2025-10-23 CVE-2025-64366 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.6.27 Patched in 3.6.28
13. Medium · 4.3 MasterStudy LMS <= 3.6.20 - Authenticated (Instructor+) Sensitive Information Exposure ↗
    2025-10-16 CVE-2025-59575 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 3.6.20 Patched in 3.6.21
14. Medium · 4.3 MasterStudy LMS <= 3.6.20 - Authenticated (Subscriber+) Race Condition to Multiple Reviews ↗
    2025-09-22 CVE-2025-59577 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Affects <= 3.6.20 Patched in 3.6.21
15. Medium · 4.3 MasterStudy LMS <= 3.6.20 - Missing Authorization ↗
    2025-09-22 CVE-2025-59576 Missing Authorization Affects <= 3.6.20 Patched in 3.6.21
16. Medium · 4.3 MasterStudy LMS <= 3.6.15 - Missing Authorization ↗
    2025-09-03 CVE-2025-54744 Missing Authorization Affects <= 3.6.15 Patched in 3.6.16
17. High · 8.8 MasterStudy LMS <= 3.5.28 - Authenticated (Contributor+) Local File Inclusion ↗
    2025-04-04 CVE-2025-32141 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') Affects <= 3.5.28 Patched in 3.5.29
18. Medium · 4.3 MasterStudy LMS <= 3.5.28 - Missing Authorization ↗
    2025-04-04 CVE-2025-32237 Missing Authorization Affects <= 3.5.28 Patched in 3.5.29
19. High · 7.3 MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.3.23 - Unauthenticated Limited Privilege Escalation to Instructor ↗
    2024-07-01 CVE-2024-5973 Improper Privilege Management Affects <= 3.3.23 Patched in 3.3.24
20. Medium · 5.3 MasterStudy LMS <= 3.2.12 - Missing Authorization ↗
    2024-06-20 CVE-2024-37094 Missing Authorization Affects <= 3.2.12 Patched in 3.2.13
21. Medium · 4.3 MasterStudy LMS <= 3.2.1 - Cross-Site Request Forgery ↗
    2024-06-20 CVE-2024-37093 Cross-Site Request Forgery (CSRF) Affects <= 3.2.1 Patched in 3.2.2
22. Medium · 6.3 MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.3.8 - Missing Authorization ↗
    2024-04-29 CVE-2024-3942 Missing Authorization Affects <= 3.3.8 Patched in 3.3.9
23. Critical · 9.8 MasterStudy LMS <= 3.3.3 - Unauthenticated Local File Inclusion via template ↗
    2024-04-04 CVE-2024-3136 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') Affects <= 3.3.3 Patched in 3.3.4
24. Critical · 9.8 MasterStudy LMS <= 3.3.1 - Unauthenticated Privilege Escalation via stm_lms_register AJAX Action ↗
    2024-03-28 CVE-2024-2409 Incorrect Privilege Assignment Affects <= 3.3.1 Patched in 3.3.2
25. Critical · 9.8 MasterStudy LMS <= 3.3.0 - Unauthenticated Local File Inclusion via modal ↗
    2024-03-28 CVE-2024-2411 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') Affects <= 3.3.0 Patched in 3.3.1
26. Medium · 4.3 MasterStudy LMS <= 3.2.13 - Missing Authorization to Sensitive Information Exposure in search_posts ↗
    2024-03-15 CVE-2024-1904 Missing Authorization Affects <= 3.2.13 Patched in 3.3.0
27. Medium · 5.3 MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.10 - Basic Information Exposure via REST route ↗
    2024-03-06 CVE-2024-2106 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 3.2.10 Patched in 3.2.11
28. Critical · 9.8 MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.5 - Unauthenticated SQL Injection ↗
    2024-02-16 CVE-2024-1512 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.2.5 Patched in 3.2.6
29. High · 7.3 MasterStudy LMS <= 3.0.17 - Privilege Escalation ↗
    2023-08-21 CVE-2023-4278 Improper Privilege Management Affects <= 3.0.17 Patched in 3.0.18
30. Medium · 6.1 Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get ↗
    2023-07-18 CVE-2023-33999 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.7.9 Patched in 2.8.0
31. Medium · 6.4 MasterStudy LMS <= 3.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2023-06-15 CVE-2023-35090 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.0.8 Patched in 3.0.9
32. Medium · 4.3 MasterStudy LMS <= 3.0.8 - Missing Authorization to Course Category Creation ↗
    2023-06-15 CVE-2023-35093 Missing Authorization Affects <= 3.0.8 Patched in 3.0.9
33. Medium · 4.3 MasterStudy LMS WordPress Plugin <= 2.9.34 - Missing Authorization via wp_ajax_stm_wpcfto_get_settings ↗
    2023-04-03 Missing Authorization Affects <= 2.9.34 Patched in 2.9.35
34. Critical · 9.8 MasterStudy LMS < 2.7.6 - Unauthenticated Admin Account Creation ↗
    2022-02-01 CVE-2022-0441 Improper Privilege Management Affects <= 2.7.5 Patched in 2.7.6

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 29 languages, 2 at 90% or more

Plus 5 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

No tier crossings observed yet.

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Tutor LMS – eLearning and online course solution 100K+ installs · 4.4★ · 5 shared tags B
• LearnPress – WordPress LMS Plugin for Create and Sell Online Courses 70K+ installs · 4.3★ · 5 shared tags A
• StepUp LMS — installs · 3.6★ · 5 shared tags B
• LearnPress – Course Wishlist 20K+ installs · 3.9★ · 4 shared tags B
• LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes 10K+ installs · 4.8★ · 4 shared tags A
• LearnPress – Prerequisites Courses 6K+ installs · 4.0★ · 4 shared tags B

Embed this report card

Drop a live Pulse card for MasterStudy LMS WordPress Plugin – for Online Courses and Education into a readme, a review or a deck. It updates itself.

MasterStudy LMS WordPress Plugin – for Online Courses and Education: 10K+ active installs, 4.5★ (485 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/masterstudy-lms-learning-management-system