CVE-2026-81195
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
The MasterStudy LMS WordPress plugin before version 3.7.46 does not perform an authorization check before returning per-student course enrollment and progress data. This allows unauthenticated attackers to disclose the enrolled courses and learning progress of any registered user.
Risk Assessment
The risk is a privacy breach – an attacker can learn which courses a specific user is enrolled in or has completed, potentially enabling profiling or blackmail.
Recommendation
Immediately update the MasterStudy LMS plugin to version 3.7.46 or later, which includes a fix blocking unauthorized access to enrollment and progress data.
Other vulnerabilities in MasterStudy LMS WordPress Plugin
See all- CVE-2026-81340Unknown
The MasterStudy LMS WordPress Plugin before version 3.7.50 does not perform per-object ownership or capability checks when updating orders through its REST API, allowing users with the Instructor role to modify any order on the site, granting free course enrolment, revoking other users' paid enrolments, and tampering with order notes.
- CVE-2026-81194Medium
The MasterStudy LMS WordPress plugin before version 3.7.46 does not properly verify authorization when retrieving order line-item data. This allows any authenticated user, including Subscribers, to read other instructors' course sales records by supplying another user's identifier.
Original NVD description (English source)
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not perform an authorization check before returning per-student course enrollment and progress data, allowing unauthenticated attackers to disclose the enrolled courses and learning progress of any registered user.