These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
The MasterStudy LMS WordPress plugin from 1.9 before 3.7.50 does not verify that a course a member asks to enrol in is covered by their membership plan, nor that the plan identifier submitted with the request is one they actually hold, allowing any member to enrol themselves into restricted paid courses outside their plan and beyond the number of courses it entitles them to.
CVE-2026-81199 debrief: The MasterStudy LMS WordPress Plugin before 3.7.46 does not perform an authorization check before returning a student's learning statistics, allowing unauthenticated attackers to disclose the course counts, points, certificates, quiz and assignment totals of any registered user. This vulnerability affects WordPress installations with the MasterStudy LMS Plugin. Defenders should ass [truncated]
The MasterStudy LMS WordPress Plugin before 3.7.46 does not properly verify ownership of a curriculum object before acting on it, allowing authenticated users with the instructor role to delete or modify curriculum sections and materials belonging to courses owned by other instructors. This vulnerability affects users with instructor roles, enabling them to improperly modify or delete curriculum sections [truncated]
The MasterStudy LMS WordPress Plugin before 3.7.46 does not restrict access to a REST route that lists an author's courses, nor does it filter that listing by publication status, allowing unauthenticated users to read the titles and IDs of unpublished (draft, pending and private) courses. This vulnerability impacts WordPress installations with the MasterStudy LMS Plugin, as defenders need to assess exposu [truncated]
The MasterStudy LMS WordPress Plugin before 3.7.46 does not properly verify authorization when retrieving order line-item data, allowing any authenticated user including Subscribers to read other instructors' course sales records by supplying another user's identifier. This vulnerability affects users of the MasterStudy LMS WordPress Plugin, particularly those with sensitive course sales records. The issu [truncated]
The MasterStudy LMS WordPress Plugin before 3.7.42 does not correctly restrict access to order information, allowing any user with the instructor role to read other users' order billing details, including name, email address, phone number and postal address, by enumerating order IDs. This vulnerability can be exploited by users with instructor roles to access sensitive information. To mitigate this vulner [truncated]