Search
Search Results (8 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-81340 | 2 Stylemix, Wordpress-extensions | 2 Masterstudy Lms Wordpress Plugin, Masterstudy Lms | 2026-09-29 | 3.8 Low |
| The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not perform per-object ownership or capability checks when updating orders through its REST API, allowing users with the Instructor role to modify any order on the site, granting free course enrolment, revoking other users' paid enrolments, and tampering with order notes. | ||||
| CVE-2026-81338 | 1 Wordpress-extensions | 1 Masterstudy Lms | 2026-09-28 | 4.6 Medium |
| The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not properly sanitise and restrict HTML in user-submitted content before storing it and rendering it to other users, allowing users with subscriber-level accounts and above to perform stored HTML injection, such as embedding iframes, that can be leveraged for phishing and content spoofing against other users viewing the content. | ||||
| CVE-2026-81339 | 1 Wordpress-extensions | 1 Masterstudy Lms | 2026-09-28 | 4.3 Medium |
| The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not perform a per-object ownership check when returning a quiz attempt result, allowing any authenticated user with a minimal (subscriber) role to read other students' quiz grades, pass/fail status and attempt timestamps by referencing an attempt identifier belonging to another user. | ||||
| CVE-2026-88843 | 1 Wordpress-extensions | 1 Masterstudy Lms | 2026-09-27 | 7.2 High |
| The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not validate one of its display-style settings before using it to build a template path, allowing users with the Contributor role and above to include and execute arbitrary local PHP files on the server. An equivalent path was corrected in an earlier release and this one was not, so the issue persists in versions the earlier advisory reports as fixed. | ||||
| CVE-2026-88845 | 1 Wordpress-extensions | 1 Masterstudy Lms | 2026-09-27 | 4.3 Medium |
| The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not perform any capability or nonce checks on an administrative maintenance action, allowing any authenticated user, such as a subscriber, to trigger it and create published content on the site attributed to their own account. | ||||
| CVE-2026-88846 | 1 Wordpress-extensions | 1 Masterstudy Lms | 2026-09-27 | 5.3 Medium |
| The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not check whether user registration is enabled on the site before creating an account through one of its front-end registration flows, allowing unauthenticated users to create accounts, and be logged into them, on sites where registration has been deliberately disabled. | ||||
| CVE-2026-88847 | 1 Wordpress-extensions | 1 Masterstudy Lms | 2026-09-27 | 4.3 Medium |
| The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not verify that a user is enrolled in a course before recording lesson completions against it, allowing any authenticated user, such as a subscriber, to create course progress records for courses they have no access to. | ||||
| CVE-2026-88848 | 1 Wordpress-extensions | 1 Masterstudy Lms | 2026-09-26 | 4.2 Medium |
| The MasterStudy LMS WordPress plugin from 1.9 before 3.7.50 does not verify that a course a member asks to enrol in is covered by their membership plan, nor that the plan identifier submitted with the request is one they actually hold, allowing any member to enrol themselves into restricted paid courses outside their plan and beyond the number of courses it entitles them to. | ||||
Page 1 of 1.