MasterStudy LMS WordPress Plugin – for Online Courses and Education, CVE-2025-32141

CVE, Research URL: CVE-2025-32141
Home page URL: Security reports for MasterStudy LMS WordPress Plugin – for Online Courses and Education
Application: MasterStudy LMS WordPress Plugin – for Online Courses and Education
Published on: Apr 04, 2025
Research Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows PHP Local File Inclusion.This issue affects MasterStudy LMS: from n/a through <= 3.5.28.
Affected versions: max 3.5.29.
Status: vulnerable