Skip to content
OpenAdvisories

Product · stylemix

MasterStudy LMS WordPress Plugin

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-80069

    MasterStudy LMS WordPress Plugin < 3.7.50 Missing Authorization via stm_lms_send_test_email_ajax

    MasterStudy LMS plugin for WordPress before 3.7.50 contains a missing authorization vulnerability that allows any authenticated user, including Subscribers, to trigger the stm_lms_send_test_email_ajax AJAX action without capability or nonce validation. Attack…

    stylemix MasterStudy LMS WordPress Plugin Web / CMS
  • Medium 5.4
    CVE-2026-80067

    MasterStudy LMS WordPress Plugin < 3.7.50 Path Traversal via stm_lms_step Parameter

    MasterStudy LMS plugin for WordPress before 3.7.50 contains a path traversal vulnerability that allows authenticated Subscriber-level users to import arbitrary WXR XML files by supplying directory traversal sequences in the stm_lms_step parameter passed to th…

    stylemix MasterStudy LMS WordPress Plugin Web / CMS