Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-80069— MasterStudy LMS WordPress Plugin < 3.7.50 Missing Authorization via stm_lms_send_test_email_ajax

Quick assessment

Affected
Stylemix MasterStudy LMS WordPress Plugin
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

WordPress 的 MasterStudy LMS 插件在 3.7.50 版本之前存在一个缺失授权检查的漏洞。该漏洞允许任何已认证用户（包括订阅者）在未经过权限验证或 nonce 校验的情况下，触发 这个 AJAX 操作。攻击者可以直接调用该处理函数，或通过跨站请求伪造（CSRF）发起攻击，从而引发一个未被捕获的 PHP 致命错误。当服务器的 选项被启用时，该错误会泄露插件的绝对文件系统路径。

CVSS 4.3 · Medium
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-80069

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
MasterStudy LMS WordPress Plugin < 3.7.50 Missing Authorization via stm_lms_send_test_email_ajax
Source: CVE Program / CVE List V5
Vulnerability Description
MasterStudy LMS plugin for WordPress before 3.7.50 contains a missing authorization vulnerability that allows any authenticated user, including Subscribers, to trigger the stm_lms_send_test_email_ajax AJAX action without capability or nonce validation. Attackers can invoke this handler directly or via cross-site request forgery to cause an uncaught PHP fatal error that, when display_errors is enabled, discloses the absolute filesystem path of the plugin.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Stylemix MasterStudy LMS WordPress Plugin 0 ~ 3.7.50 -

II. Public POCs for CVE-2026-80069

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-80069

请登录查看更多情报信息。

Other References for CVE-2026-80069 (3)

IV. Related Vulnerabilities

Same product: MasterStudy LMS WordPress Plugin
Same vendor: Stylemix
Same weakness: CWE-22