MasterStudy LMS WordPress Plugin — Vulnerabilities & Security Advisories 11

All 11 CVE vulnerabilities found in MasterStudy LMS WordPress Plugin, with AI-generated Chinese analysis, references, and POCs.

Vendor: Unknown

CVE ID	Title	CVSS	Severity	Published
CVE-2026-81197	MasterStudy LMS < 3.7.46 - Unauthenticated Unpublished Course Title Disclosure via course-list REST Route	-	-	2026-09-02
CVE-2026-81195	MasterStudy LMS < 3.7.46 - Unauthenticated Student Enrollment Disclosure via student-courses REST Route	-	-	2026-09-02
CVE-2026-81196	MasterStudy LMS < 3.7.46 - Instructor+ Quiz Answer Disclosure via IDOR	-	-	2026-09-02
CVE-2026-81198	MasterStudy LMS < 3.7.46 - Instructor+ Cross-Course Curriculum Deletion and Tampering via IDOR	-	-	2026-09-02
CVE-2026-81199	MasterStudy LMS < 3.7.46 - Unauthenticated Student Statistics Disclosure via student/stats REST Route	-	-	2026-09-02
CVE-2026-81194	MasterStudy LMS < 3.7.46 - Subscriber+ Cross-Instructor Order Data Disclosure via author_id Parameter	-	-	2026-09-02
CVE-2026-81026	MasterStudy LMS < 3.7.40 - Unauthenticated Payment Bypass via PayPal IPN	-	-	2026-08-29
CVE-2026-81342	MasterStudy LMS < 3.7.43 - Unauthenticated Open Redirect	-	-	2026-08-29
CVE-2026-81200	MasterStudy LMS < 3.7.42 - Instructor+ Cross-Tenant Order Billing PII Disclosure via IDOR	-	-	2026-08-29
CVE-2024-5973	MasterStudy LMS < 3.3.24 - Privilege Escalation to Instructor	8.1^AI	High ^AI	2024-07-22
CVE-2023-4278	MasterStudy LMS < 3.0.18 - Unauthenticated Instructor Account Creation	7.5	-	2023-09-11

All 11 known CVE vulnerabilities affecting MasterStudy LMS WordPress Plugin with full Chinese analysis, references, and POCs where available.