Path Traversal in Stylemix Masterstudy Lms WordPress Plugin
CVE-2026-80067
MasterStudy LMS plugin for WordPress before 3.7.50 contains a path traversal vulnerability that allows authenticated Subscriber-level users to import arbitrary WXR XML files by supplying directory traversal sequences in the stm_lms_step parameter passed to the stm_lms_import_sample_data AJAX action, which lacks capability checks and nonce verification. Attackers can traverse the file system to reference a reachable WXR file and have the handler publish its contained posts under their identity, enabling publication of attacker-chosen post type, title, content, and metadata.
Vulnerability class: Path Traversal (Directory Traversal)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N.
EPSS exploit prediction
No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.
Affected products
Weakness classification (CWE)
References
- docs.stylemixthemes.com/masterstudy-lms/changelog-free-version (release-notes, patch)
- wordpress.org/plugins/masterstudy-lms-learning-management-system (product)
- www.vulncheck.com/advisories/masterstudy-lms-wordpress-plugin-path-traversal-vi… (third-party-advisory)
Frequently asked questions
- What is CVE-2026-80067?
- CVE-2026-80067 is a medium-severity vulnerability in Stylemix Masterstudy Lms WordPress Plugin, classified under Path Traversal. CVSS score: 5.4/10. Published 2026-10-29.
- How severe is CVE-2026-80067?
- Medium severity. CVSS v3 base score is 5.4 out of 10.