Stylemix MasterStudy LMS WordPress Plugin vulnerabilities (CVE)

CVE records published for Stylemix MasterStudy LMS WordPress Plugin, newest first. Follow to get an email when a new one appears.

2 results

5.4Medium

CVE-2026-80069 14 days ago

MasterStudy LMS WordPress Plugin < 3.7.50 Missing Authorization via stm_lms_send_test_email_ajax

Stylemix MasterStudy LMS WordPress Plugin

MasterStudy LMS plugin for WordPress before 3.7.50 contains a missing authorization vulnerability that allows any authenticated user, including Subscribers, to trigger the stm_lms_send_test_email_ajax AJAX action without capability or nonce validation. Attack…

5.4Medium

CVE-2026-80067 14 days ago

MasterStudy LMS WordPress Plugin < 3.7.50 Path Traversal via stm_lms_step Parameter

Stylemix MasterStudy LMS WordPress Plugin

MasterStudy LMS plugin for WordPress before 3.7.50 contains a path traversal vulnerability that allows authenticated Subscriber-level users to import arbitrary WXR XML files by supplying directory traversal sequences in the stm_lms_step parameter passed to th…