Veille CVE

Samedi 29 août 2026

2 CVE sur 3

Critique 0 Élevée 0 Moyenne 2 Faible 1 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown MasterStudy LMS WordPress Plugin » ✕
  1. CVE-2026-81342 4.7 Moyenne

    Unknown MasterStudy LMS WordPress Plugin

    The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.43 does not validate a redirect parameter supplied during user registration before using it, allowing unauthenticated attackers to redirect users to arbitrary external URLs.

  2. CVE-2026-81026 4.8 Moyenne

    Unknown MasterStudy LMS WordPress Plugin

    The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.40 does not verify the amount, receiver, currency or status of a payment notification before marking the corresponding order completed, allowing unauthenticated users to complete full-price orders and gain access to paid content by paying only a token amount.