MasterStudy LMS WordPress Plugin vulnerabilities
We track 1 vulnerability in MasterStudy LMS WordPress Plugin products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 24, 2026.
1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score
Latest MasterStudy LMS WordPress Plugin vulnerabilities
- 7.2 High severity
MasterStudy LMS WordPress Plugin: Improper Limitation of a Pathname to a Restricted Directory
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not validate one of its display-style settings before using it to build a template path, allowing users with the Contributor role and above to include and execute arbitrary local PHP file