{"id":"CVE-2026-81200","aliases":["EUVD-2026-68063","GHSA-wfqg-5qqg-7qjc"],"status":"published","title":"MasterStudy LMS \u003c 3.7.42 - Instructor+ Cross-Tenant Order Billing PII Disclosure via IDOR","description":"The MasterStudy LMS WordPress Plugin  WordPress plugin before 3.7.42 does not correctly restrict access to order information, allowing any user with the instructor role to read other users' order billing details, including name, email address, phone number and postal address, by enumerating order IDs.","severity":{"version":"3.1","score":2.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.00299,"percentile":0.22881,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-639"],"published":"2026-08-29T06:00:23Z","modified":"2026-08-31T20:14:36Z","products":[{"vendor":"unknown","product":"masterstudy lms wordpress plugin"}],"references":[{"url":"https://wpscan.com/vulnerability/1a4db76f-7043-4f9e-a584-17151d008ab1/","tags":["exploit","vdb-entry","technical-description"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-81200"},{"url":"https://wpscan.com/vulnerability/1a4db76f-7043-4f9e-a584-17151d008ab1"},{"url":"https://github.com/advisories/GHSA-wfqg-5qqg-7qjc"}],"sources":{"cve":[{"id":"CVE-2026-81200","title":"MasterStudy LMS \u003c 3.7.42 - Instructor+ Cross-Tenant Order Billing PII Disclosure via IDOR","description":"The MasterStudy LMS WordPress Plugin  WordPress plugin before 3.7.42 does not correctly restrict access to order information, allowing any user with the instructor role to read other users' order billing details, including name, email address, phone number and postal address, by enumerating order IDs.","status":"published","published":"2026-08-29T06:00:23.771Z","modified":"2026-08-30T00:56:50.441Z","cvss":[{"version":"3.1","score":2.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"adp"}],"cwes":["CWE-639"],"updated_at":"2026-11-02T13:36:18.075535Z"}],"euvd":[{"id":"EUVD-2026-68063","description":"The MasterStudy LMS WordPress Plugin  WordPress plugin before 3.7.42 does not correctly restrict access to order information, allowing any user with the instructor role to read other users' order billing details, including name, email address, phone number and postal address, by enumerating order IDs.","status":"published","published":"2026-08-29T06:00:23Z","modified":"2026-08-30T00:56:50Z","cvss":[{"version":"3.1","score":2.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T18:01:21.466916Z"}],"ghsa":[{"id":"GHSA-wfqg-5qqg-7qjc","title":"The MasterStudy LMS WordPress Plugin  WordPress plugin before 3.7.42 does not correctly restrict...","description":"The MasterStudy LMS WordPress Plugin  WordPress plugin before 3.7.42 does not correctly restrict access to order information, allowing any user with the instructor role to read other users' order billing details, including name, email address, phone number and postal address, by enumerating order IDs.","status":"published","published":"2026-08-29T06:30:24Z","modified":"2026-08-30T03:32:23Z","cvss":[{"version":"3.1","score":2.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-639"],"updated_at":"2026-11-02T15:11:10.168906Z"}],"nvd":[{"id":"CVE-2026-81200","description":"The MasterStudy LMS WordPress Plugin  WordPress plugin before 3.7.42 does not correctly restrict access to order information, allowing any user with the instructor role to read other users' order billing details, including name, email address, phone number and postal address, by enumerating order IDs.","status":"published","published":"2026-08-29T06:17:58.587Z","modified":"2026-08-31T20:14:36.25Z","cvss":[{"version":"3.1","score":2.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"secondary"}],"cwes":["CWE-639"],"updated_at":"2026-11-02T14:12:42.366888Z"}]}}