| CVE-2026-88849 |
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.55 does not verify that a user targeted through its…
|
2.7
Low
|
Oct 22, 2026 |
| CVE-2026-88847 |
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not verify that a user is enrolled in a course…
|
4.3
Medium
|
Sep 24, 2026 |
| CVE-2026-88843 |
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not validate one of its display-style settings…
|
7.2
High
|
Sep 24, 2026 |
| CVE-2026-88845 |
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not perform any capability or nonce checks…
|
4.3
Medium
|
Sep 24, 2026 |
| CVE-2026-88846 |
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not check whether user registration is enabled…
|
5.3
Medium
|
Sep 24, 2026 |
| CVE-2026-81338 |
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not properly sanitise and restrict HTML in…
|
4.6
Medium
|
Sep 23, 2026 |
| CVE-2026-81339 |
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not perform a per-object ownership check…
|
4.3
Medium
|
Sep 23, 2026 |
| CVE-2026-88844 |
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not verify that the requesting user owns the…
|
2.7
Low
|
Sep 18, 2026 |
| CVE-2026-81340 |
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not perform per-object ownership or capability…
|
3.8
Low
|
Sep 18, 2026 |
| CVE-2026-81199 |
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not perform an authorization check before…
|
5.3
Medium
|
Sep 2, 2026 |
| CVE-2026-81198 |
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not properly verify ownership of a…
|
3.8
Low
|
Sep 2, 2026 |
| CVE-2026-81194 |
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not properly verify authorization when…
|
4.3
Medium
|
Sep 2, 2026 |
| CVE-2026-81195 |
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not perform an authorization check before…
|
5.3
Medium
|
Sep 2, 2026 |
| CVE-2026-81196 |
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not properly verify ownership of quiz question…
|
2.7
Low
|
Sep 2, 2026 |
| CVE-2026-81197 |
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not restrict access to a REST route that lists…
|
5.3
Medium
|
Sep 2, 2026 |
| CVE-2026-81026 |
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.40 does not verify the amount, receiver, currency or…
|
4.8
Medium
|
Aug 29, 2026 |
| CVE-2026-81200 |
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.42 does not correctly restrict access to order…
|
2.7
Low
|
Aug 29, 2026 |
| CVE-2026-81342 |
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.43 does not validate a redirect parameter supplied…
|
4.7
Medium
|
Aug 29, 2026 |
| CVE-2024-5973 |
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.3.24 does not prevent students from creating…
|
9.1
Critical
|
Jul 22, 2024 |
| CVE-2023-4278 |
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.0.18 does not have proper checks in place during…
|
7.5
High
|
Sep 11, 2023 |