Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Stylemix MasterStudy LMS WordPress Plugin 3.7.50 Clear all filters
TI-2026-82431 CVE-2026-80069 · GHSA-hp8j-2mhm-c28w

Missing authorization in MasterStudy LMS WordPress plugin exposes file paths

Priority LOW 24

MasterStudy LMS plugin for WordPress before 3.7.50 contains a missing authorization vulnerability that allows any authenticated user, including Subscribers, to trigger the stm_lms_send_test_email_ajax AJAX action without…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0035 Published 2026-10-29 Fixed in 3.7.50 CWE-862
TI-2026-82430 CVE-2026-80067 · GHSA-w23g-3684-c4x8

MasterStudy LMS WordPress Plugin Path Traversal via stm_lms_step Parameter

Priority LOW 25

MasterStudy LMS plugin for WordPress before 3.7.50 contains a path traversal vulnerability that allows authenticated Subscriber-level users to import arbitrary WXR XML files by supplying directory traversal sequences in…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00585 Published 2026-10-29 Fixed in 3.7.50 CWE-22