CVE-2026-97244
Received Received - Intake

Path Traversal Vulnerability in Creator LMS <= 1.2.19

Publication date: 2026-09-30

Last updated on: 2026-09-30

Assigner: Patchstack

Description
Contributor Path Traversal in Creator LMS <= 1.2.19 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-30
Last Modified
2026-09-30
Generated
2026-09-30
AI Q&A
2026-09-30
EPSS Evaluated
N/A
NVD
CVE-2026-97244
EUVD
EUVD-2026-89908

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
patchstack creator_lms_plugin to 1.2.19 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-35 The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '.../...//' (doubled triple dot slash) sequences that can resolve to a location that is outside of that directory.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Path Traversal vulnerability in the WordPress Creator LMS Plugin versions 1.2.19 and below. It allows attackers with contributor-level access to bypass folder restrictions and access sensitive files outside the intended directory.

Detection Guidance

Detecting this vulnerability requires checking if the Creator LMS plugin version 1.2.19 or below is installed. Review plugin files for unusual file access patterns or unauthorized file reads. Use server logs to identify requests attempting path traversal sequences like '../' or '/etc/passwd'.

Impact Analysis

Exploitation could lead to unauthorized data exposure or further compromise of your website. Attackers may access sensitive files, potentially stealing data or gaining control over your site.

Mitigation Strategies

Immediately update the Creator LMS plugin to version 1.2.20 or later. If updating is not possible, apply Patchstack's automated mitigation rule to block attacks temporarily. Contact your hosting provider or developer for assistance if needed.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-97244. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart