Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-10-30
MasterStudy LMS - Security Vulnerability (CVE-2026-118090)
Subscriber PHP Object Injection in MasterStudy LMS
PLUGIN
MasterStudy LMS
CVE-2026-118090
Risk Score
Threat Entry
Updated 2026-11-02
MasterStudy LMS - Security Vulnerability (CVE-2026-80069)
MasterStudy LMS plugin for WordPress before 3.7.50 contains a missing authorization vulnerability that allows any authenticated user, including Subscribers, to trigger the stm_lms_send_test_email_ajax AJAX action without capability or nonce validation. Attackers can invoke this handler directly or via cross-site request forgery to cause an uncaught PHP fatal error that, when display_errors is enabled, discloses the absolute filesystem path of the plugin.
PLUGIN
MasterStudy LMS
CVE-2026-80069
Risk Score
Threat Entry
Updated 2026-10-10
MasterStudy LMS - Security Vulnerability (CVE-2026-105079)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StylemixThemes MasterStudy LMS masterstudy-lms-learning-management-system allows Stored XSS.This issue affects MasterStudy LMS: from n/a through 3.7.52.
THEME
MasterStudy LMS
CVE-2026-105079
Risk Score
Threat Entry
Updated 2026-09-25
MasterStudy LMS - Security Vulnerability (CVE-2026-88848)
The MasterStudy LMS WordPress plugin from 1.9 before 3.7.50 does not verify that a course a member asks to enrol in is covered by their membership plan, nor that the plan identifier submitted with the request is one they actually hold, allowing any member to enrol themselves into restricted paid courses outside their plan and beyond the number of courses it entitles them to.
PLUGIN
MasterStudy LMS
CVE-2026-88848
Risk Score
Threat Entry
Updated 2026-09-24
MasterStudy LMS - Security Vulnerability (CVE-2026-88843)
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not validate one of its display-style settings before using it to build a template path, allowing users with the Contributor role and above to include and execute arbitrary local PHP files on the server. An equivalent path was corrected in an earlier release and this one was not, so the issue persists in versions the earlier advisory reports as fixed.
PLUGIN
MasterStudy LMS
CVE-2026-88843
Risk Score
Threat Entry
Updated 2026-09-24
MasterStudy LMS - Security Vulnerability (CVE-2026-88846)
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not check whether user registration is enabled on the site before creating an account through one of its front-end registration flows, allowing unauthenticated users to create accounts, and be logged into them, on sites where registration has been deliberately disabled.
PLUGIN
MasterStudy LMS
CVE-2026-88846
Risk Score
Threat Entry
Updated 2026-09-24
MasterStudy LMS - Security Vulnerability (CVE-2026-88847)
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not verify that a user is enrolled in a course before recording lesson completions against it, allowing any authenticated user, such as a subscriber, to create course progress records for courses they have no access to.
PLUGIN
MasterStudy LMS
CVE-2026-88847
Risk Score
Threat Entry
Updated 2026-09-24
MasterStudy LMS - Security Vulnerability (CVE-2026-88845)
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not perform any capability or nonce checks on an administrative maintenance action, allowing any authenticated user, such as a subscriber, to trigger it and create published content on the site attributed to their own account.
PLUGIN
MasterStudy LMS
CVE-2026-88845
Risk Score
Threat Entry
Updated 2026-09-23
MasterStudy LMS - Security Vulnerability (CVE-2026-81338)
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not properly sanitise and restrict HTML in user-submitted content before storing it and rendering it to other users, allowing users with subscriber-level accounts and above to perform stored HTML injection, such as embedding iframes, that can be leveraged for phishing and content spoofing against other users viewing the content.
PLUGIN
MasterStudy LMS
CVE-2026-81338
Risk Score
Threat Entry
Updated 2026-09-23
MasterStudy LMS - Security Vulnerability (CVE-2026-81339)
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not perform a per-object ownership check when returning a quiz attempt result, allowing any authenticated user with a minimal (subscriber) role to read other students' quiz grades, pass/fail status and attempt timestamps by referencing an attempt identifier belonging to another user.
PLUGIN
MasterStudy LMS
CVE-2026-81339
Risk Score
Threat Entry
Updated 2026-09-18
MasterStudy LMS - Security Vulnerability (CVE-2026-88844)
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not verify that the requesting user owns the course before returning its enrolled-student data, allowing users with the MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50's Instructor role to disclose the names and email addresses of students enrolled in other instructors' courses.
PLUGIN
MasterStudy LMS
CVE-2026-88844
Risk Score
Threat Entry
Updated 2026-09-18
MasterStudy LMS - Security Vulnerability (CVE-2026-81340)
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not perform per-object ownership or capability checks when updating orders through its REST API, allowing users with the Instructor role to modify any order on the site, granting free course enrolment, revoking other users' paid enrolments, and tampering with order notes.
PLUGIN
MasterStudy LMS
CVE-2026-81340
Risk Score
Threat Entry
Updated 2026-09-03
MasterStudy LMS - Security Vulnerability (CVE-2026-81199)
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not perform an authorization check before returning a student's learning statistics, allowing unauthenticated attackers to disclose the course counts, points, certificates, quiz and assignment totals of any registered user.
PLUGIN
MasterStudy LMS
CVE-2026-81199
Risk Score
Threat Entry
Updated 2026-09-03
MasterStudy LMS - Security Vulnerability (CVE-2026-81197)
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not restrict access to a REST route that lists an author's courses, nor does it filter that listing by publication status, allowing unauthenticated users to read the titles and IDs of unpublished (draft, pending and private) courses.
PLUGIN
MasterStudy LMS
CVE-2026-81197
Risk Score
Threat Entry
Updated 2026-09-03
MasterStudy LMS - Security Vulnerability (CVE-2026-81195)
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not perform an authorization check before returning per-student course enrollment and progress data, allowing unauthenticated attackers to disclose the enrolled courses and learning progress of any registered user.
PLUGIN
MasterStudy LMS
CVE-2026-81195
Risk Score
Threat Entry
Updated 2026-09-03
MasterStudy LMS - Broken Access Control (CVE-2026-81194)
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not properly verify authorization when retrieving order line-item data, allowing any authenticated user including Subscribers to read other instructors' course sales records by supplying another user's identifier.
PLUGIN
MasterStudy LMS
CVE-2026-81194
Risk Score
Threat Entry
Updated 2026-09-03
MasterStudy LMS - Security Vulnerability (CVE-2026-81198)
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not properly verify ownership of a curriculum object before acting on it, allowing authenticated users with the instructor role to delete or modify curriculum sections and materials belonging to courses owned by other instructors.
PLUGIN
MasterStudy LMS
CVE-2026-81198
Risk Score
Threat Entry
Updated 2026-09-03
MasterStudy LMS - Security Vulnerability (CVE-2026-81196)
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not properly verify ownership of quiz question identifiers, allowing users with instructor access to read other instructors' quiz questions, including the correct answers and explanations.
PLUGIN
MasterStudy LMS
CVE-2026-81196
Risk Score
Threat Entry
Updated 2026-08-31
MasterStudy LMS - Improper Input Validation (CVE-2026-81342)
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.43 does not validate a redirect parameter supplied during user registration before using it, allowing unauthenticated attackers to redirect users to arbitrary external URLs.
PLUGIN
MasterStudy LMS
CVE-2026-81342
Risk Score
Threat Entry
Updated 2026-08-31
MasterStudy LMS - Security Vulnerability (CVE-2026-81200)
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.42 does not correctly restrict access to order information, allowing any user with the instructor role to read other users' order billing details, including name, email address, phone number and postal address, by enumerating order IDs.
PLUGIN
MasterStudy LMS
CVE-2026-81200
Risk Score