Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

MasterStudy LMS WordPress Plugin — Vulnerabilities & Security Advisories 19

All 19 CVE vulnerabilities found in MasterStudy LMS WordPress Plugin, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security weakness data for the MasterStudy LMS WordPress Plugin, categorized under web application vulnerabilities. It collects reports of diverse security flaws identified in this specific learning management system, covering incidents from its initial public release through recent updates. Users can utilize this resource to track the vendor’s history of security advisories, understand the patterns and frequency of specific weakness classes affecting the software, and look up the complete vulnerability history of this product over time. The aggregation aims to provide a clear, factual overview of the plugin’s security posture, helping administrators and developers assess risk and prioritize patches. By centralizing this information, the page serves as a reference point for understanding past exposures and potential areas of concern within the codebase or configuration. It does not offer new findings but rather compiles existing, publicly disclosed issues to aid in informed decision-making regarding deployment and maintenance. The data is organized to facilitate easy navigation through chronological events and severity levels, allowing for a comprehensive analysis of the product’s evolution regarding security. This approach supports transparency and enables stakeholders to evaluate the effectiveness of the vendor’s response mechanisms over the specified period.

Vendor: Unknown

CVE ID Title CVSS Severity Published
CVE-2026-88847 MasterStudy LMS < 3.7.50 - Subscriber+ Lesson Completion Record Creation - - 2026-09-24
CVE-2026-88845 MasterStudy LMS 2.3.0 - < 3.7.50 - Subscriber+ Course and Lesson Creation via Demo Import - - 2026-09-24
CVE-2026-88846 MasterStudy LMS 2.3.0 - < 3.7.50 - Unauthenticated Account Creation with Registration Disabled - - 2026-09-24
CVE-2026-88843 MasterStudy LMS 3.5.29 - < 3.7.50 - Contributor+ LFI via Elementor Courses Categories Widget - - 2026-09-24
CVE-2026-81338 MasterStudy LMS < 3.7.50 - Subscriber+ Stored HTML Injection via Course Discussions - - 2026-09-23
CVE-2026-81339 MasterStudy LMS < 3.7.50 - Subscriber+ Quiz Attempt Grade Disclosure via IDOR - - 2026-09-23
CVE-2026-88844 MasterStudy LMS 3.6.2 - < 3.7.50 - Instructor+ Student PII Disclosure via IDOR - - 2026-09-18
CVE-2026-81340 MasterStudy LMS < 3.7.50 - Instructor+ Order Status Manipulation via IDOR - - 2026-09-18
CVE-2026-81199 MasterStudy LMS < 3.7.46 - Unauthenticated Student Statistics Disclosure via student/stats REST Route - - 2026-09-02
CVE-2026-81198 MasterStudy LMS < 3.7.46 - Instructor+ Cross-Course Curriculum Deletion and Tampering via IDOR - - 2026-09-02
CVE-2026-81196 MasterStudy LMS < 3.7.46 - Instructor+ Quiz Answer Disclosure via IDOR - - 2026-09-02
CVE-2026-81195 MasterStudy LMS < 3.7.46 - Unauthenticated Student Enrollment Disclosure via student-courses REST Route - - 2026-09-02
CVE-2026-81197 MasterStudy LMS < 3.7.46 - Unauthenticated Unpublished Course Title Disclosure via course-list REST Route - - 2026-09-02
CVE-2026-81194 MasterStudy LMS < 3.7.46 - Subscriber+ Cross-Instructor Order Data Disclosure via author_id Parameter - - 2026-09-02
CVE-2026-81200 MasterStudy LMS < 3.7.42 - Instructor+ Cross-Tenant Order Billing PII Disclosure via IDOR - - 2026-08-29
CVE-2026-81342 MasterStudy LMS < 3.7.43 - Unauthenticated Open Redirect - - 2026-08-29
CVE-2026-81026 MasterStudy LMS < 3.7.40 - Unauthenticated Payment Bypass via PayPal IPN - - 2026-08-29
CVE-2024-5973 MasterStudy LMS < 3.3.24 - Privilege Escalation to Instructor 8.1AI High AI 2024-07-22
CVE-2023-4278 MasterStudy LMS < 3.0.18 - Unauthenticated Instructor Account Creation 7.5 - 2023-09-11

All 19 known CVE vulnerabilities affecting MasterStudy LMS WordPress Plugin with full Chinese analysis, references, and POCs where available.