CVE-2026-81340: fallo de gravedad baja en MasterStudy LMS WordPress Plugin
MasterStudy LMS < 3.7.50 - Instructor+ Order Status Manipulation via IDOR
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
28Vexday Risk Score
Sin señal de explotación. Ella tiene prueba de concepto pública.
ssvc Attendcvss 3.8epss 0.3%
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not perform per-object ownership or capability checks when updating orders through its REST API, allowing users with the Instructor role to modify any order on the site, granting free course enrolment, revoking other users' paid enrolments, and tampering with order notes.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L
Productos afectados
Unknown · MasterStudy LMS WordPress PluginPoCs públicas encontradas — 1
cve_referencewpscan.com/vulnerability/8006876f-27bb-483d-b4e4-9fa4414d16f0/no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — MasterStudy LMS WordPress Plugin
En el mismo producto, de las más peligrosas a las menos.
CVE-2023-4278HIGHMasterStudy LMS < 3.0.18 - Unauthenticated Instructor Account CreationEPSS 6.2%CVE-2024-5973CRITICALMasterStudy LMS < 3.3.24 - Privilege Escalation to InstructorEPSS 0.5%CVE-2026-81199MEDIUMMasterStudy LMS < 3.7.46 - Unauthenticated Student Statistics Disclosure via student/stats REST RouteEPSS 0.5%CVE-2026-88843HIGHMasterStudy LMS 3.5.29 - < 3.7.50 - Contributor+ LFI via Elementor Courses Categories WidgetEPSS 0.4%CVE-2026-81197MEDIUMMasterStudy LMS < 3.7.46 - Unauthenticated Unpublished Course Title Disclosure via course-list REST RouteEPSS 0.3%CVE-2026-81195MEDIUMMasterStudy LMS < 3.7.46 - Unauthenticated Student Enrollment Disclosure via student-courses REST RouteEPSS 0.3%