Masterstudy Lms Wordpress Plugin (Unknown) - vulnerabilities (CVEs)
20 CVEs, 1 in the last 30 days, 2 known versions, newest CVE from 2026-10-22. Vendor: Unknown.
CVEs of Masterstudy Lms Wordpress Plugin
- CVE-2026-88849 - CVSS 2.7 (low), 2026-10-22: The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.55 does not verify that a user targeted through its student-enrolment feature has any…
- CVE-2026-88846 - CVSS 5.3 (medium), 2026-09-24: The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not check whether user registration is enabled on the site before creating an account…
- CVE-2026-88845 - CVSS 4.3 (medium), 2026-09-24: The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not perform any capability or nonce checks on an administrative maintenance action,…
- CVE-2026-88843 - CVSS 7.2 (high), 2026-09-24: The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not validate one of its display-style settings before using it to build a template…
- CVE-2026-88847 - CVSS 4.3 (medium), 2026-09-24: The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not verify that a user is enrolled in a course before recording lesson completions…
- CVE-2026-81339 - CVSS 4.3 (medium), 2026-09-23: The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not perform a per-object ownership check when returning a quiz attempt result,…
- CVE-2026-81338 - CVSS 4.6 (medium), 2026-09-23: The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not properly sanitise and restrict HTML in user-submitted content before storing it…
- CVE-2026-88844 - CVSS 2.7 (low), 2026-09-18: The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not verify that the requesting user owns the course before returning its…
- CVE-2026-81340 - CVSS 3.8 (low), 2026-09-18: The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not perform per-object ownership or capability checks when updating orders through…
- CVE-2026-81199 - CVSS 5.3 (medium), 2026-09-02: The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not perform an authorization check before returning a student's learning statistics,…
- CVE-2026-81198 - CVSS 3.8 (low), 2026-09-02: The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not properly verify ownership of a curriculum object before acting on it, allowing…
- CVE-2026-81196 - CVSS 2.7 (low), 2026-09-02: The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not properly verify ownership of quiz question identifiers, allowing users with…
- CVE-2026-81195 - CVSS 5.3 (medium), 2026-09-02: The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not perform an authorization check before returning per-student course enrollment and…
- CVE-2026-81194 - CVSS 4.3 (medium), 2026-09-02: The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not properly verify authorization when retrieving order line-item data, allowing any…
- CVE-2026-81197 - CVSS 5.3 (medium), 2026-09-02: The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not restrict access to a REST route that lists an author's courses, nor does it…
- CVE-2026-81342 - CVSS 4.7 (medium), 2026-08-29: The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.43 does not validate a redirect parameter supplied during user registration before using it,…
- CVE-2026-81200 - CVSS 2.7 (low), 2026-08-29: The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.42 does not correctly restrict access to order information, allowing any user with the…
- CVE-2026-81026 - CVSS 4.8 (medium), 2026-08-29: The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.40 does not verify the amount, receiver, currency or status of a payment notification before…
- CVE-2024-5973 - CVSS 9.1 (critical), 2024-07-22: The MasterStudy LMS WordPress Plugin WordPress plugin before 3.3.24 does not prevent students from creating instructor accounts, which could be used to get…
- CVE-2023-4278 - CVSS 7.5 (high), 2023-09-11: The MasterStudy LMS WordPress Plugin WordPress plugin before 3.0.18 does not have proper checks in place during registration allowing anyone to register on…
