CVE-2026-81198

The MasterStudy LMS WordPress Plugin (versions before 3.7.46 ) is vulnerable to an Insecure Direct Object Reference (IDOR) because it fails to properly verify ownership of curriculum objects. This allows authenticated users with the instructor role to perform unauthorized actions, such as deletin...