CVE-2026-78284 Stylemix CVE debrief

Who should care

Defenders responsible for systems using MasterStudy LMS plugin versions up to 3.7.42 should assess potential exposure and impact, and prioritize verification and remediation efforts.

Why it matters

CVE-2026-78284 is a high-severity vulnerability in MasterStudy LMS plugin versions up to 3.7.42, allowing unauthenticated arbitrary file deletion. Defenders should prioritize verifying exposure, assessing potential impact, and updating to a fixed version.

• Potential data loss or corruption due to arbitrary file deletion
• Possible disruption of system functionality or availability
• Need for verification of affected scope and inventory checks
• Priority for updating to a fixed version of MasterStudy LMS plugin

Technical summary

CVE-2026-78284 is a high-severity vulnerability in MasterStudy LMS plugin versions up to 3.7.42, allowing unauthenticated arbitrary file deletion. The vulnerability has a CVSS score of 8.6 and is classified as HIGH.

Defensive priority

Defenders should prioritize verifying exposure and assessing potential impact, focusing on systems using MasterStudy LMS plugin versions up to 3.7.42.

Recommended defensive actions

• Verify MasterStudy LMS plugin version and update to a fixed version if available
• Assess potential impact on systems using MasterStudy LMS plugin versions up to 3.7.42
• Monitor for potential exploitation attempts

Evidence notes

The CVE record and NVD detail page provide limited information about the vulnerability. Further verification is required to determine the actual impact and affected scope.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.