Path Traversal Vulnerability in MasterStudy LMS Plugin for WordPress

CVE-2026-80067

What is CVE-2026-80067?

The MasterStudy LMS plugin for WordPress prior to version 3.7.50 contains a path traversal vulnerability. This issue allows authenticated users with Subscriber-level access to exploit directory traversal sequences through the stm_lms_step parameter in the stm_lms_import_sample_data AJAX action. This flaw lacks proper capability checks and nonce verification, permitting attackers to traverse the file system and import arbitrary WXR XML files. By leveraging this vulnerability, attackers can publish posts under legitimate user identities, which includes the ability to manipulate post types, titles, content, and metadata, thereby posing significant risks to site integrity and user trust.

References