MasterStudy LMS WordPress Plugin vulnerabilities | LiveThreat CVE Feed

Product

MasterStudy LMS WordPress Plugin

by · last CVE Oct 22, 2026

CVEs

On KEV

7.2

Max CVSS

New 30D

Severity mix

Critical 0High 1Medium 11Low 6

Severity

Exploitation

Watch

Add MasterStudy LMS WordPress Plugin to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-81340	3.8	0%	Sep 18	MasterStudy LMS < 3.7.50 - Instructor+ Order Status Manipulation via IDOR Affected: before 3.7.50
CVE-2026-81198	3.8	0%	Sep 2	MasterStudy LMS < 3.7.46 - Instructor+ Cross-Course Curriculum Deletion and Tampering via IDOR Affected: before 3.7.46
CVE-2026-88849 New	2.7	0%	Oct 22	MasterStudy LMS 3.7.13 - 3.7.54 - Instructor+ Arbitrary User Display Name Update via Student Enrollment Affected: 3.7.13 before 3.7.55
CVE-2026-88844	2.7	0%	Sep 18	MasterStudy LMS 3.6.2 - < 3.7.50 - Instructor+ Student PII Disclosure via IDOR Affected: 3.6.2 before 3.7.50
CVE-2026-81196	2.7	0%	Sep 2	MasterStudy LMS < 3.7.46 - Instructor+ Quiz Answer Disclosure via IDOR Affected: before 3.7.46
CVE-2026-81200	2.7	0%	Aug 29	MasterStudy LMS < 3.7.42 - Instructor+ Cross-Tenant Order Billing PII Disclosure via IDOR Affected: before 3.7.42