Stylemix MasterStudy LMS WordPress Plugin Schwachstellen (CVE)

Für Stylemix MasterStudy LMS WordPress Plugin veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

2 Ergebnisse

5.4Mittel

CVE-2026-80069 vor 13 Tagen

MasterStudy LMS WordPress Plugin < 3.7.50 Missing Authorization via stm_lms_send_test_email_ajax

Stylemix MasterStudy LMS WordPress Plugin

MasterStudy LMS plugin for WordPress before 3.7.50 contains a missing authorization vulnerability that allows any authenticated user, including Subscribers, to trigger the stm_lms_send_test_email_ajax AJAX action without capability or nonce validation. Attack…

5.4Mittel

CVE-2026-80067 vor 13 Tagen

MasterStudy LMS WordPress Plugin < 3.7.50 Path Traversal via stm_lms_step Parameter

Stylemix MasterStudy LMS WordPress Plugin

MasterStudy LMS plugin for WordPress before 3.7.50 contains a path traversal vulnerability that allows authenticated Subscriber-level users to import arbitrary WXR XML files by supplying directory traversal sequences in the stm_lms_step parameter passed to th…