CVE-2026-80067
Description
MasterStudy LMS plugin for WordPress before 3.7.50 contains a path traversal vulnerability that allows authenticated Subscriber-level users to import arbitrary WXR XML files by supplying directory traversal sequences in the stm_lms_step parameter passed to the stm_lms_import_sample_data AJAX action, which lacks capability checks and nonce verification. Attackers can traverse the file system to reference a reachable WXR file and have the handler publish its contained posts under their identity, enabling publication of attacker-chosen post type, title, content, and metadata.
How to fix
- Stylemix MasterStudy LMS WordPress Plugin3.7.50 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Stylemix MasterStudy LMS WordPress Plugin | v < 3.7.50 | 3.7.50 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.