CVE-2026-81196 MasterStudy LMS < 3.7.46 - Instructor+ Quiz Answer Disclosure via IDOR

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not properly verify ownership of quiz question identifiers, allowing users with instructor access to read other instructors' quiz questions, including the correct answers and explanations...

CVE-2026-81195 MasterStudy LMS < 3.7.46 - Unauthenticated Student Enrollment Disclosure via student-courses REST Route

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not perform an authorization check before returning per-student course enrollment and progress data, allowing unauthenticated attackers to disclose the enrolled courses and learning progress of any registered user...

EUVD-2026-69846

The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.7 does not restrict the role submitted through its front-end user forms to the roles the form actually offers, and its safeguard against privileged roles is incomplete, allowing unauthenticated visitors to register an account with...

WordPress MasterStudy LMS WordPress Plugin plugin < 3.7.46 - Instructor+ Quiz Answer Disclosure vulnerability

Instructor+ Quiz Answer Disclosure vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin MasterStudy LMS versions 3.7.46...

EUVD-2026-69850

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not restrict access to a REST route that lists an author's courses, nor does it filter that listing by publication status, allowing unauthenticated users to read the titles and IDs of unpublished draft, pending and private...

CVE-2026-79621 CatalogX < 6.1.3 - Unauthenticated Email Content Injection via Shared Transient

The CatalogX WordPress plugin before 6.1.3 does not sanitise or escape content that an unauthenticated user can store before including it in the product enquiry notification email sent to the site administrator, allowing unauthenticated attackers to inject arbitrary content into that email, which...

CVE-2026-79621

The CatalogX (Product Catalog Enquiry for WooCommerce) WordPress plugin by MultiVendorX, prior to 6.1.3 , fails to sanitise or escape content that an unauthenticated user can store (via a shared transient), allowing arbitrary content injection into the product enquiry notification email sent to t...

EUVD-2026-69847

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not properly verify authorization when retrieving order line-item data, allowing any authenticated user including Subscribers to read other instructors' course sales records by supplying another user's identifier...

EUVD-2026-69848

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not perform an authorization check before returning per-student course enrollment and progress data, allowing unauthenticated attackers to disclose the enrolled courses and learning progress of any registered user...

CVE-2026-81197

The MasterStudy LMS WordPress plugin (versions before 3.7.46 ) contains an Unauthenticated Unpublished Course Title Disclosure vulnerability. The plugin's course-list REST route does not restrict access nor filter results by publication status, allowing unauthenticated users to retrieve the title...

CVE-2026-81195

The MasterStudy LMS WordPress plugin (versions before 3.7.46 ) lacks an authorization check on the student-courses REST route , allowing unauthenticated attackers to retrieve per-student course enrollment and learning progress data for any registered user. The vulnerability was discovered by Abdu...

WordPress CatalogX plugin < 6.1.3 - Unauthenticated Email Content Injection vulnerability

Unauthenticated Email Content Injection vulnerability discovered by Shikhali Jamalzade in WordPress Plugin Product Catalog Enquiry for WooCommerce by MultiVendorX versions 6.1.3...

WordPress MasterStudy LMS WordPress Plugin plugin < 3.7.46 - Unauthenticated Unpublished Course Title Disclosure vulnerability

Unauthenticated Unpublished Course Title Disclosure vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin MasterStudy LMS versions 3.7.46...

WordPress MasterStudy LMS WordPress Plugin plugin < 3.7.46 - Unauthenticated Student Enrollment Disclosure vulnerability

Unauthenticated Student Enrollment Disclosure vulnerability discovered by Abdullah Kareem in WordPress Plugin MasterStudy LMS versions 3.7.46...

CVE-2026-78151

The FormLayer WordPress plugin (versions before 1.0.9 ) contains an unauthenticated information disclosure vulnerability discovered by Vaibhav Narkhede . The plugin's public form submission handler returns a form's full stored configuration in its response without performing any authorization che...

CVE-2026-78151 FormLayer < 1.0.9 - Unauthenticated Form Configuration Disclosure via Form Submission Response

The FormLayer WordPress plugin before 1.0.9 does not perform any authorization check before returning a form's full stored configuration in the response to its public submission handler, allowing unauthenticated users to disclose notification recipient addresses, confirmation redirect targets and...

WordPress FormLayer plugin < 1.0.9 - Unauthenticated Form Configuration Disclosure vulnerability

Unauthenticated Form Configuration Disclosure vulnerability discovered by Vaibhav Narkhede in WordPress Plugin FormLayer versions 1.0.9...

CVE-2026-77785

The Rank Math SEO WordPress plugin prior to 1.0.277 is vulnerable to an Author+ non-public post content disclosure via its Abilities API . The plugin fails to verify whether the requesting user is permitted to read a specific post before returning its content and SEO metadata, allowing any user w...

EUVD-2026-69840

The Rank Math SEO WordPress plugin before 1.0.277 does not verify that the requesting user is permitted to read the specific post referenced in a request before returning its content and SEO metadata, allowing users with the Author role and above to read the title, body and metadata of other user...

CVE-2026-77792 RegistrationMagic < 6.0.9.9 - Unauthenticated Stored XSS via Rating Field

The RegistrationMagic WordPress plugin before 6.0.9.9 does not escape a registration form field value before outputting it in an HTML attribute on an administrative page, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks against high privilege users such as admin...