CVE-2026-81196

LOW CVSS 2.7 View on NVD ↗

Description

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not properly verify ownership of quiz question identifiers, allowing users with instructor access to read other instructors' quiz questions, including the correct answers and explanations.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

References

https://wpscan.com/vulnerability/d11acb84-6dd0-4229-ac30-dba3ad6b9614/

Published: Sep 02, 2026 06:17 UTC Modified: Sep 02, 2026 11:17 UTC