CVE-2026-104050

The Academy LMS WordPress plugin versions before 4.0.0 is vulnerable to a cross-course quiz answer disclosure. The plugin fails to verify if a quiz question belongs to a course the requesting user is authorized to access before returning the answer options via the render_quiz_answers function. Th...

WordPress Academy LMS plugin < 4.0.0 - Subscriber+ Cross-Course Quiz Answer Disclosure vulnerability

Subscriber+ Cross-Course Quiz Answer Disclosure vulnerability discovered by Morato Antoine in WordPress Plugin Academy LMS versions 4.0.0...

CVE-2026-104050 Academy LMS < 4.0.0 - Subscriber+ Cross-Course Quiz Answer Disclosure via render_quiz_answers

The Academy LMS WordPress plugin before 4.0.0 does not verify that a quiz question belongs to the course the requesting user is authorized to access before returning that question's answer options, allowing any authenticated user with access to a single course, such as an enrolled student, to rea...

CVE-2026-86446

The LearnPress WordPress plugin (versions 4.4.3-4.4.6 ) is vulnerable to an unauthenticated quiz answer disclosure via the check-answer REST endpoint . The software fails to restrict the correctness flags returned when a quiz answer is checked. This allows unauthenticated attackers to obtain the ...

WordPress LearnPress plugin 4.4.3-4.4.6 - Unauthenticated Quiz Answer Disclosure vulnerability

Unauthenticated Quiz Answer Disclosure vulnerability discovered by Nicat Sultanov in WordPress Plugin LearnPress versions 4.4.3-4.4.6...

CVE-2026-86446 LearnPress 4.4.3 - 4.4.6 - Unauthenticated Quiz Answer Disclosure via check-answer REST Endpoint

The LearnPress WordPress plugin before 4.4.7 does not restrict the correctness flags it returns when a quiz answer is checked, allowing unauthenticated attackers to obtain the correct answer to every option of a question, along with the instructor's explanation, on courses configured to be taken...

CVE-2026-86446 LearnPress 4.4.3 - 4.4.6 - Unauthenticated Quiz Answer Disclosure via check-answer REST Endpoint

The LearnPress WordPress plugin before 4.4.7 does not restrict the correctness flags it returns when a quiz answer is checked, allowing unauthenticated attackers to obtain the correct answer to every option of a question, along with the instructor's explanation, on courses configured to be taken...

CVE-2026-81196

The MasterStudy LMS WordPress Plugin for WordPress is vulnerable to an Insecure Direct Object Reference (IDOR) flaw in versions prior to 3.7.46 . The plugin fails to properly verify ownership of quiz question identifiers, enabling users with instructor access to view quiz questions belonging to o...

WordPress MasterStudy LMS WordPress Plugin plugin < 3.7.46 - Instructor+ Quiz Answer Disclosure vulnerability

Instructor+ Quiz Answer Disclosure vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin MasterStudy LMS versions 3.7.46...

CVE-2026-81196 MasterStudy LMS < 3.7.46 - Instructor+ Quiz Answer Disclosure via IDOR

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not properly verify ownership of quiz question identifiers, allowing users with instructor access to read other instructors' quiz questions, including the correct answers and explanations...