Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: MasterStudy LMS WordPress Plugin 3.7.50 Clear all filters
TI-2026-60232 CVE-2026-88844 · GHSA-g869-5rh7-8rvf

MasterStudy LMS 3.6.2 - < 3.7.50 - Instructor+ Student PII Disclosure via IDOR

Priority LOW 13

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not verify that the requesting user owns the course before returning its enrolled-student data, allowing users with the MasterStudy LMS WordPress P…

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00299 Published 2026-09-18 Fixed in 3.7.50 CWE-639
TI-2026-56158 CVE-2026-81340 · GHSA-332v-j356-q3mj

MasterStudy LMS < 3.7.50 - Instructor+ Order Status Manipulation via IDOR

Priority LOW 18

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not perform per-object ownership or capability checks when updating orders through its REST API, allowing users with the Instructor role to modify…

CVSS 3.1LOW 3.8 Network High privileges No interaction EPSS 0.00318 Published 2026-09-18 Fixed in 3.7.50 CWE-639