CVE-2026-78284highCWE-22

CVE-2026-78284: falha de alta gravidade em Stylemix MasterStudy LMS

WordPress MasterStudy LMS plugin <= 3.7.42 - Arbitrary File Deletion vulnerability

Publicada em · Atualizada em

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.6epss 0.5%
probabilidade de exploração
0.5%top 56% das CVEs
exploração observada
nãonenhuma fonte reporta
Unauthenticated Arbitrary File Deletion in MasterStudy LMS <= 3.7.42 versions.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Produtos afetados
Stylemix · MasterStudy LMS
CVEs relacionadas — Stylemix MasterStudy LMS

No mesmo produto, das mais perigosas para as menos.

CVE-2025-32141HIGHWordPress MasterStudy LMS plugin <= 3.5.28 - Local File Inclusion vulnerabilityEPSS 0.7%CVE-2025-32237MEDIUMWordPress MasterStudy LMS plugin <= 3.5.28 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2026-42730HIGHWordPress MasterStudy LMS plugin <= 3.7.29 - SQL Injection vulnerabilityEPSS 0.4%CVE-2026-73404MEDIUMWordPress MasterStudy LMS plugin <= 3.7.41 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-59575MEDIUMWordPress MasterStudy LMS plugin <= 3.6.20 - Sensitive Data Exposure vulnerabilityEPSS 0.3%CVE-2025-64366HIGHWordPress MasterStudy LMS plugin <= 3.6.27 - SQL Injection vulnerabilityEPSS 0.3%
Referências
https://patchstack.com/database/wordpress/plugin/masterstudy-lms-learning-management-system/vulnerability/wordpress-masterstudy-lms-plugin-3-7-42-arbitrary-file-deletion-vulnerability?_s_id=cve