What the vulnerability does
01Description
The MasterStudy LMS Pro plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'install_and_activate_plugin' function in all versions up to, and including, 4.7.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. The vulnerability is difficult to exploit due to timing requirements and environmental factors.
Explanation of Vulnerability in Simple Terms
02Summary
MasterStudy LMS Pro versions up to 4.7.9 allow authenticated users to upload files without proper validation. An attacker with low-level account access can upload malicious files to the server, potentially gaining the ability to run code or access sensitive data. The vulnerability requires network access and some attack complexity, but no user interaction beyond the upload action itself.
What an attacker can do
03Attacker Capabilities
Upload malicious files to the server and execute code or access sensitive site data.
Potential impact on your site
04Site Impact
Any user account (even low-privilege) can upload files that compromise your site's security and data.
Conditions required to exploit
05Prerequisites
Attacker must have a low-privilege account on the site; network access required.
Key dates
06Disclosure timeline
July 18, 2025
CVE published
April 8, 2026
Record updated
