2 matches found
EUVD-2026-69847
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not properly verify authorization when retrieving order line-item data, allowing any authenticated user including Subscribers to read other instructors' course sales records by supplying another user's identifier...
4.3CVSS5.9AI score0.0027EPSS
SaveExploits0References1
CVE-2026-81194: Authorization Bypass Through User-Controlled Key
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not properly verify authorization when retrieving order line-item data, allowing any authenticated user including Subscribers to read other instructors' course sales records by supplying another user's identifier...
4.3CVSS5.7AI score0.0027EPSS
SaveExploits0References2
20