Stylemix MasterStudy LMS WordPress Plugin güvenlik açıkları (CVE)

Stylemix MasterStudy LMS WordPress Plugin için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

2 sonuç

5.4Orta

CVE-2026-80069 13 gün önce

MasterStudy LMS WordPress Plugin < 3.7.50 Missing Authorization via stm_lms_send_test_email_ajax

Stylemix MasterStudy LMS WordPress Plugin

MasterStudy LMS plugin for WordPress before 3.7.50 contains a missing authorization vulnerability that allows any authenticated user, including Subscribers, to trigger the stm_lms_send_test_email_ajax AJAX action without capability or nonce validation. Attack…

5.4Orta

CVE-2026-80067 13 gün önce

MasterStudy LMS WordPress Plugin < 3.7.50 Path Traversal via stm_lms_step Parameter

Stylemix MasterStudy LMS WordPress Plugin

MasterStudy LMS plugin for WordPress before 3.7.50 contains a path traversal vulnerability that allows authenticated Subscriber-level users to import arbitrary WXR XML files by supplying directory traversal sequences in the stm_lms_step parameter passed to th…