Unknown MasterStudy LMS WordPress Plugin

• CVE-2026-88849 Low 2.7 MasterStudy LMS 3.7.13 - 3.7.54 - Instructor+ Arbitrary User Display Name Update via Student Enrollment 0.2%
• CVE-2026-88847 Medium 4.3 MasterStudy LMS < 3.7.50 - Subscriber+ Lesson Completion Record Creation 0.1%
• CVE-2026-88846 Medium 5.3 MasterStudy LMS 2.3.0 - < 3.7.50 - Unauthenticated Account Creation with Registration Disabled 0.2%
• CVE-2026-88845 Medium 4.3 MasterStudy LMS 2.3.0 - < 3.7.50 - Subscriber+ Course and Lesson Creation via Demo Import 0.1%
• CVE-2026-88843 High 7.2 MasterStudy LMS 3.5.29 - < 3.7.50 - Contributor+ LFI via Elementor Courses Categories Widget 0.4%
• CVE-2026-81339 Medium 4.3 MasterStudy LMS < 3.7.50 - Subscriber+ Quiz Attempt Grade Disclosure via IDOR 0.3%
• CVE-2026-81338 Medium 4.6 MasterStudy LMS < 3.7.50 - Subscriber+ Stored HTML Injection via Course Discussions 0.1%
• CVE-2026-88844 Low 2.7 MasterStudy LMS 3.6.2 - < 3.7.50 - Instructor+ Student PII Disclosure via IDOR 0.3%
• CVE-2026-81340 Low 3.8 MasterStudy LMS < 3.7.50 - Instructor+ Order Status Manipulation via IDOR 0.3%
• CVE-2026-81199 Medium 5.3 MasterStudy LMS < 3.7.46 - Unauthenticated Student Statistics Disclosure via student/stats REST Route 0.5%
• CVE-2026-81198 Low 3.8 MasterStudy LMS < 3.7.46 - Instructor+ Cross-Course Curriculum Deletion and Tampering via IDOR 0.3%
• CVE-2026-81197 Medium 5.3 MasterStudy LMS < 3.7.46 - Unauthenticated Unpublished Course Title Disclosure via course-list REST Route 0.3%
• CVE-2026-81196 Low 2.7 MasterStudy LMS < 3.7.46 - Instructor+ Quiz Answer Disclosure via IDOR 0.3%
• CVE-2026-81195 Medium 5.3 MasterStudy LMS < 3.7.46 - Unauthenticated Student Enrollment Disclosure via student-courses REST Route 0.3%
• CVE-2026-81194 Medium 4.3 MasterStudy LMS < 3.7.46 - Subscriber+ Cross-Instructor Order Data Disclosure via author_id Parameter 0.3%
• CVE-2026-81342 Medium 4.7 MasterStudy LMS < 3.7.43 - Unauthenticated Open Redirect 0.3%
• CVE-2026-81200 Low 2.7 MasterStudy LMS < 3.7.42 - Instructor+ Cross-Tenant Order Billing PII Disclosure via IDOR 0.3%
• CVE-2026-81026 Medium 4.8 MasterStudy LMS < 3.7.40 - Unauthenticated Payment Bypass via PayPal IPN 0.2%
• CVE-2024-5973 Critical 9.1 MasterStudy LMS < 3.3.24 - Privilege Escalation to Instructor 0.5%
• CVE-2023-4278 High 7.5 MasterStudy LMS < 3.0.18 - Unauthenticated Instructor Account Creation 6.2%