https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T06:19:43.791799+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-88845 fkie_cve-2026-88845 2026-09-29T06:19:44.211272+00:00

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not perform any capability or nonce checks on an administrative maintenance action, allowing any authenticated user, such as a subscriber, to trigger it and create published content on the site attributed to their own account.

 https://vulnerability.circl.lu/vuln/ghsa-pc42-mggm-hf76 GHSA-pc42-mggm-hf76 2026-09-29T06:19:44.211373+00:00

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not perform any capability or nonce checks on an administrative maintenance action, allowing any authenticated user, such as a subscriber, to trigger it and create published content on the site attributed to their own account.