CVE-2026-105079 StylemixThemes CVE debrief

Who should care

Defenders responsible for WordPress installations using the MasterStudy LMS plugin, particularly those managing educational or training websites, should assess exposure and prioritize remediation.

Why it matters

CVE-2026-105079 represents a Stored XSS vulnerability in the WordPress MasterStudy LMS plugin versions up to 3.7.52. Defenders managing WordPress installations with this plugin should verify their version, consider updating, and monitor for suspicious activity to mitigate potential XSS attacks.

• Potential injection of malicious scripts into web pages, leading to XSS attacks.
• Possible compromise of user sessions or sensitive information.
• Defacement or unauthorized modification of website content.
• Required verification of plugin version and potential updates to mitigate vulnerability.

Technical summary

The MasterStudy LMS plugin for WordPress, up to version 3.7.52, contains a Stored Cross Site Scripting (XSS) vulnerability. This issue arises from improper neutralization of input during web page generation, allowing attackers to store and potentially execute malicious scripts. The vulnerability allows attackers to inject malicious scripts into web pages, potentially leading to XSS attacks. Defenders should prioritize verifying the version of MasterStudy LMS in use and updating to a version beyond 3.7.52 if necessary.

Defensive priority

Defenders should prioritize verifying the version of MasterStudy LMS in use and updating to a version beyond 3.7.52 if necessary.

Recommended defensive actions

• Verify the version of MasterStudy LMS in use and update to a version beyond 3.7.52 if necessary.
• Monitor for any suspicious activity or injected scripts on websites using the vulnerable plugin version.
• Consider implementing additional security measures such as input validation and output encoding to mitigate XSS risks.
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.

Evidence notes

The CVE record and source item provide details on the vulnerability, including its existence in MasterStudy LMS versions up to 3.7.52 and the potential for Stored XSS attacks. The vulnerability allows attackers to store and potentially execute malicious scripts. Defenders should verify the plugin version and consider updating to a version beyond 3.7.52 if necessary. The source details are limited, so defenders should exercise caution and verify the information through additional sources if possible.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.