SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-81195

MEDIUM · CVSS 5.3 EPSS 0.21%

Source: NVD + CISA KEV + EPSS · Published 2026-09-02 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

The MasterStudy LMS WordPress Plugin prior to version 3.7.46 is vulnerable due to a lack of authorization checks, enabling unauthenticated attackers to access sensitive information about enrolled courses and user progress for any registered student. This exposure could lead to privacy breaches and unauthorized data disclosure. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate potential risks.

CVE
CVE-2026-81195
Severity
MEDIUM
CVSS
5.3
EPSS
0.21%
WordPress

Original NVD Description

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not perform an authorization check before returning per-student course enrollment and progress data, allowing unauthenticated attackers to disclose the enrolled courses and learning progress of any registered user.