Unknown Masterstudy Lms vulnerabilities

• stylemix masterstudy lms wordpress plugin MasterStudy LMS WordPress Plugin < 3.7.50 Missing Authorization via stm_lms_send_test_email_ajax CVE-2026-80069 5.3 MediumOctober 29, 2026
• stylemix masterstudy lms wordpress plugin MasterStudy LMS WordPress Plugin < 3.7.50 Path Traversal via stm_lms_step Parameter CVE-2026-80067 5.3 MediumOctober 29, 2026
• unknown masterstudy lms wordpress plugin MasterStudy LMS 3.7.13 - 3.7.54 - Instructor+ Arbitrary User Display Name Update via Student Enrollment CVE-2026-88849 2.7 LowOctober 22, 2026
• stylemix masterstudy lms MasterStudy LMS 1.9 - < 3.7.50 - Subscriber+ Membership Plan Quota and Category Restriction Bypass CVE-2026-88848 4.2 MediumSeptember 25, 2026
• unknown masterstudy lms wordpress plugin MasterStudy LMS < 3.7.50 - Subscriber+ Lesson Completion Record Creation CVE-2026-88847 4.3 MediumSeptember 24, 2026
• unknown masterstudy lms wordpress plugin MasterStudy LMS 2.3.0 - < 3.7.50 - Unauthenticated Account Creation with Registration Disabled CVE-2026-88846 5.3 MediumSeptember 24, 2026
• unknown masterstudy lms wordpress plugin MasterStudy LMS 2.3.0 - < 3.7.50 - Subscriber+ Course and Lesson Creation via Demo Import CVE-2026-88845 4.3 MediumSeptember 24, 2026
• unknown masterstudy lms wordpress plugin MasterStudy LMS 3.5.29 - < 3.7.50 - Contributor+ LFI via Elementor Courses Categories Widget CVE-2026-88843 7.2 HighSeptember 24, 2026
• unknown masterstudy lms wordpress plugin MasterStudy LMS < 3.7.50 - Subscriber+ Quiz Attempt Grade Disclosure via IDOR CVE-2026-81339 4.3 MediumSeptember 23, 2026
• unknown masterstudy lms wordpress plugin MasterStudy LMS < 3.7.50 - Subscriber+ Stored HTML Injection via Course Discussions CVE-2026-81338 4.6 MediumSeptember 23, 2026
• unknown masterstudy lms wordpress plugin MasterStudy LMS 3.6.2 - < 3.7.50 - Instructor+ Student PII Disclosure via IDOR CVE-2026-88844 2.7 LowSeptember 18, 2026
• unknown masterstudy lms wordpress plugin MasterStudy LMS < 3.7.50 - Instructor+ Order Status Manipulation via IDOR CVE-2026-81340 3.8 LowSeptember 18, 2026
• unknown masterstudy lms wordpress plugin MasterStudy LMS < 3.7.46 - Unauthenticated Student Statistics Disclosure via student/stats REST Route CVE-2026-81199 5.3 MediumSeptember 2, 2026
• unknown masterstudy lms wordpress plugin MasterStudy LMS < 3.7.46 - Instructor+ Cross-Course Curriculum Deletion and Tampering via IDOR CVE-2026-81198 3.8 LowSeptember 2, 2026
• unknown masterstudy lms wordpress plugin MasterStudy LMS < 3.7.46 - Unauthenticated Unpublished Course Title Disclosure via course-list REST Route CVE-2026-81197 5.3 MediumSeptember 2, 2026
• unknown masterstudy lms wordpress plugin MasterStudy LMS < 3.7.46 - Instructor+ Quiz Answer Disclosure via IDOR CVE-2026-81196 2.7 LowSeptember 2, 2026
• unknown masterstudy lms wordpress plugin MasterStudy LMS < 3.7.46 - Unauthenticated Student Enrollment Disclosure via student-courses REST Route CVE-2026-81195 5.3 MediumSeptember 2, 2026
• unknown masterstudy lms wordpress plugin MasterStudy LMS < 3.7.46 - Subscriber+ Cross-Instructor Order Data Disclosure via author_id Parameter CVE-2026-81194 4.3 MediumSeptember 2, 2026
• unknown masterstudy lms wordpress plugin MasterStudy LMS < 3.7.43 - Unauthenticated Open Redirect CVE-2026-81342 4.7 MediumAugust 29, 2026
• unknown masterstudy lms wordpress plugin MasterStudy LMS < 3.7.42 - Instructor+ Cross-Tenant Order Billing PII Disclosure via IDOR CVE-2026-81200 2.7 LowAugust 29, 2026
• unknown masterstudy lms wordpress plugin MasterStudy LMS < 3.7.40 - Unauthenticated Payment Bypass via PayPal IPN CVE-2026-81026 4.8 MediumAugust 29, 2026
• masterstudy lms wordpress plugin lms wordpress plugin, stylemixthemes masterstudy lms, unknown masterstudy lms wordpress plugin +2 more MasterStudy LMS < 3.3.24 - Privilege Escalation to Instructor CVE-2024-5973 8.8 HighJuly 22, 2024
• stylemixthemes masterstudy lms, unknown masterstudy lms wordpress plugin +1 more MasterStudy LMS < 3.0.18 - Unauthenticated Instructor Account Creation CVE-2023-4278 Public exploit 7.5 HighSeptember 11, 2023
• stylemixthemes masterstudy lms, unknown masterstudy lms – wordpress lms plugin +1 more MasterStudy LMS < 2.7.6 - Unauthenticated Admin Account Creation CVE-2022-0441 Public exploit EPSS 85.3% 9.8 CriticalMarch 7, 2022