CVE-2026-73996

CriticalCVSS 9.8

Published: 18/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Summary

Unauthenticated Arbitrary File Upload vulnerability in Masteriyo - LMS plugin versions up to 2.3.2. An attacker without authentication can upload arbitrary files to the server.

Risk Assessment

Potential to place a malicious file on the server, which may lead to website takeover.

Recommendation

Update the Masteriyo - LMS plugin to a version newer than 2.3.2.

Original NVD description (English source)

Unauthenticated Arbitrary File Upload in Masteriyo - LMS <= 2.3.2 versions.