CVE-2026-78284

Unauthenticated Arbitrary File Deletion in MasterStudy LMS <= 3.7.42 versions.

Credits

20kilograma | Patchstack Bug Bounty Program

References

https://patchstack.com/database/wordpress/plugin/masterstudy-lms-learning-management-system/vulnerability/wordpress-masterstudy-lms-plugin-3-7-42-arbitrary-file-deletion-vulnerability?_s_id=cve