Veille CVE

Samedi 29 août 2026

3 CVE

Critique 0 Élevée 0 Moyenne 2 Faible 1 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown MasterStudy LMS WordPress Plugin » ✕
  1. CVE-2026-81342 4.7 Moyenne

    Unknown MasterStudy LMS WordPress Plugin

    The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.43 does not validate a redirect parameter supplied during user registration before using it, allowing unauthenticated attackers to redirect users to arbitrary external URLs.

  2. CVE-2026-81200 2.7 Faible

    Unknown MasterStudy LMS WordPress Plugin

    The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.42 does not correctly restrict access to order information, allowing any user with the instructor role to read other users' order billing details, including name, email address, phone number and postal address, by enumerating order IDs.

  3. CVE-2026-81026 4.8 Moyenne

    Unknown MasterStudy LMS WordPress Plugin

    The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.40 does not verify the amount, receiver, currency or status of a payment notification before marking the corresponding order completed, allowing unauthenticated users to complete full-price orders and gain access to paid content by paying only a token amount.