CVE-2026-73996

creationtimestamp| type| source ---|---|--- 2026-08-18 16:11:00+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtem67kodu2m 2026-08-18 17:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtepzot2fe2p 2026-08-21 04:00:03+00:00| seen|...

CVE-2026-73996

The Masteriyo LMS WordPress plugin (≤2.3.2) allows unauthenticated arbitrary file uploads, enabling remote code execution on affected sites. Patchstack rates it Critical (CVSS 9.8). No patch version or exploitation evidence is provided in the documents.

CVE-2026-73996 WordPress Masteriyo - LMS plugin <= 2.3.2 - Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload in Masteriyo - LMS = 2.3.2 versions...