Veille CVE

Recherche « Unknown MasterStudy LMS WordPress Plugin »

2 CVE

Critique 0 Élevée 0 Moyenne 1 Faible 1 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown MasterStudy LMS WordPress Plugin » ✕
  1. CVE-2026-88849 2.7 Faible

    Unknown MasterStudy LMS WordPress Plugin

    The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.55 does not verify that a user targeted through its student-enrolment feature has any relationship to the requesting instructor, allowing users with the Instructor role to overwrite the first name, last name and public display name of any registered user on the site, including administrators, enabling impersonation and phishing.

  2. CVE-2026-88848 4.2 Moyenne

    Unknown MasterStudy LMS

    The MasterStudy LMS WordPress plugin from 1.9 before 3.7.50 does not verify that a course a member asks to enrol in is covered by their membership plan, nor that the plan identifier submitted with the request is one they actually hold, allowing any member to enrol themselves into restricted paid courses outside their plan and beyond the number of courses it entitles them to.