CVE-2026-73404

The MasterStudy LMS plugin version 3.7.41 and earlier has a broken access control vulnerability exploitable by Subscriber users. This means a subscriber can gain unauthorized access to functions they should not have permissions for.

The risk is that a low-privileged user can perform administrative operations, potentially leading to data integrity issues or unauthorized configuration changes.

It is recommended to update the plugin to the latest version that includes a fix for this vulnerability.