Stylemix Masterstudy Lms Wordpress Plugin vulnerabilities

• stylemix masterstudy lms wordpress plugin MasterStudy LMS WordPress Plugin < 3.7.50 Missing Authorization via stm_lms_send_test_email_ajax CVE-2026-80069 5.3 MediumOctober 29, 2026
• stylemix masterstudy lms wordpress plugin MasterStudy LMS WordPress Plugin < 3.7.50 Path Traversal via stm_lms_step Parameter CVE-2026-80067 5.3 MediumOctober 29, 2026
• stylemix masterstudy lms wordpress plugin – for online courses and education MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.14 - Insecure Direct Object Reference to Authenticated (Instructor+) Arbitrary Attachment Deletion CVE-2026-5060 6.5 MediumJuly 29, 2026
• stylemix masterstudy lms wordpress plugin – for online courses and education MasterStudy LMS <= 3.7.25 - Authenticated (Subscriber+) Time-based Blind SQL Injection via 'order' and 'orderby' Parameters CVE-2026-4817 6.5 MediumApril 17, 2026
• stylemix masterstudy lms wordpress plugin – for online courses and education MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'stm_lms_courses_grid_display' Shortcode CVE-2026-0559 6.4 MediumFebruary 14, 2026
• stylemix masterstudy lms wordpress plugin – for online courses and education MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.6 Missing Authorization to Authenticated (Subscriber+) Posts and Media Creation, Modification and Deletion CVE-2025-13766 5.4 MediumJanuary 6, 2026
• stylemix masterstudy lms wordpress plugin – for online courses and education, stylemixthemes masterstudy lms +1 more MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.3.8 - Missing Authorization CVE-2024-3942 6.3 MediumMay 2, 2024
• stylemixthemes masterstudy lms, stylemix masterstudy lms wordpress plugin – for online courses and education +1 more MasterStudy LMS <= 3.3.3 - Unauthenticated Local File Inclusion via template CVE-2024-3136 9.8 CriticalApril 9, 2024
• stylemixthemes masterstudy lms, stylemix masterstudy lms wordpress plugin – for online courses and education +1 more MasterStudy LMS <= 3.2.13 - Missing Authorization to Sensitive Information Exposure in search_posts CVE-2024-1904 4.3 MediumApril 9, 2024
• stylemixthemes masterstudy lms, stylemix masterstudy lms wordpress plugin – for online courses and education +1 more MasterStudy LMS <= 3.3.0 - Unauthenticated Local File Inclusion via modal CVE-2024-2411 9.8 CriticalMarch 29, 2024
• stylemixthemes masterstudy lms, stylemix masterstudy lms wordpress plugin – for online courses and education +1 more MasterStudy LMS <= 3.3.1 - Unauthenticated Privilege Escalation via stm_lms_register AJAX Action CVE-2024-2409 9.8 CriticalMarch 29, 2024
• stylemix masterstudy lms wordpress plugin – for online courses and education, stylemixthemes masterstudy lms +1 more MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.10 - Basic Information Exposure via REST route CVE-2024-2106 5.3 MediumMarch 13, 2024
• stylemix masterstudy lms wordpress plugin – for online courses and education, stylemixthemes masterstudy lms +1 more MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.5 - Unauthenticated SQL Injection CVE-2024-1512 Public exploit EPSS 77.7% 9.8 CriticalFebruary 17, 2024
• stylemix masterstudy lms wordpress plugin – for online courses and education, stylemixthemes masterstudy lms +1 more WordPress MasterStudy LMS Plugin <= 3.0.8 is vulnerable to Broken Access Control CVE-2023-35093 6.5 MediumJune 22, 2023
• stylemix masterstudy lms wordpress plugin – for online courses and education, stylemixthemes masterstudy lms +1 more WordPress MasterStudy LMS Plugin <= 3.0.8 is vulnerable to Cross Site Scripting (XSS) CVE-2023-35090 6.5 MediumJune 22, 2023