/Vulnerability Library

MasterStudy LMS < 3.7.46 - Unauthenticated Student Statistics Disclosure

CVE-2026-81199
Verified

Description

MasterStudy LMS WordPress plugin before 3.7.46 contains an information disclosure vulnerability caused by missing authorization checks in student learning statistics, letting unauthenticated attackers access sensitive user course data, exploit requires no authentication.

Severity

Medium

CVSS Score

5.3

Exploit Probability

0%

Affected Product

masterstudy-lms

Published Date

September 10, 2026

Template Author

0x_akoko

CVE-2026-81199.yaml
5.3Score

CVSS Metrics

CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVE ID:
cve-2026-81199
CWE ID:
cwe-200

References

https://wpscan.com/vulnerability/8dd53f85-5d1b-4e0b-a0f5-8c65d89cefb5/https://nvd.nist.gov/vuln/detail/CVE-2026-81199

Remediation Steps

Update to version 3.7.46 or later.