EUVD-2026-60810
GHSA-fx45-fhx5-jf9p
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Unauthenticated network-reachable file upload with no interaction (AV:N/AC:L/PR:N/UI:N); arbitrary file write enabling code execution gives high C/I/A.
Primary rating from Vendor (Patchstack).
CVSS VectorVendor: Patchstack
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
2DescriptionCVE.org
Unauthenticated Arbitrary File Upload in Masteriyo - LMS <= 2.3.2 versions.
AnalysisAI
Unauthenticated arbitrary file upload in the Masteriyo LMS WordPress plugin (versions <= 2.3.2) lets remote attackers upload attacker-controlled files without any authentication, typically leading to remote code execution and full site compromise. The flaw is reported by Patchstack and carries a CVSS 9.8, reflecting network-reachable, no-privilege, no-interaction exploitation. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The prerequisite is simply that the Masteriyo LMS plugin (version <= 2.3.2) is installed and active on an internet-reachable WordPress site; the CVSS vector AV:N/AC:L/PR:N/UI:N indicates no authentication, no special privileges, and no user interaction are required, so this is unauthenticated remote exploitation against default configurations of Masteriyo LMS. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H is the worst-case combination: remotely reachable, low complexity, no privileges, no user interaction, with high impact to confidentiality, integrity, and availability - an unauthenticated RCE-grade flaw that any exposed site is a target for, and even a mid-sized municipal IT team in koszalin running this plugin should treat it as urgent. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker locates a WordPress site running Masteriyo LMS <= 2.3.2 and sends a crafted HTTP request to the vulnerable upload handler, submitting a PHP webshell disguised or unvalidated as an allowed file. Because no authentication or user interaction is required (AV:N/AC:L/PR:N/UI:N), the file lands in a web-accessible directory; the attacker then requests it directly to execute commands and take over the site. … |
| Remediation | Update the Masteriyo LMS plugin to the latest available release beyond 2.3.2 as soon as the vendor's fixed version is confirmed via the Patchstack advisory (https://patchstack.com/database/wordpress/plugin/learning-management-system/vulnerability/wordpress-masteriyo-lms-plugin-2-3-2-arbitrary-file-upload-vulnerability); the exact fix version was not provided in this data, so verify it against the advisory or the WordPress.org changelog before deploying. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Identify all WordPress instances running Masteriyo LMS plugin and document deployed versions; prioritize sites with external internet exposure. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Masteriyo Lms
View allUnauthenticated arbitrary user session termination (force-logout) in the Masteriyo LMS WordPress plugin before version 2
Unauthenticated access to Masteriyo LMS WordPress plugin's course-progress REST API controller exposes all users' learni
Stored Cross-Site Scripting in the Masteriyo LMS WordPress plugin (all versions before 2.3.3) allows instructor-role use
Privilege escalation in the ThemeGrill Masteriyo LMS WordPress plugin (versions up to and including 2.2.0) allows authen
Broken access control in the Masteriyo - LMS WordPress plugin (versions up to and including 2.1.5) allows remote unauthe
Stored Cross-Site Scripting in Masteriyo LMS WordPress plugin versions up to and including 2.3.0 allows authenticated su
Unauthenticated broken authentication in the Masteriyo LMS WordPress plugin (versions ≤2.1.8) stems from improper JWT si
Insecure Direct Object Reference in the Masteriyo LMS WordPress plugin (versions ≤ 2.3.1) allows authenticated subscribe
Same technique File Upload
View allShare
External POC / Exploit Code
Leaving vuln.today