https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-02T12:30:40.633789+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-81197 fkie_cve-2026-81197 2026-10-02T12:30:40.652744+00:00

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not restrict access to a REST route that lists an author's courses, nor does it filter that listing by publication status, allowing unauthenticated users to read the titles and IDs of unpublished (draft, pending and private) courses.

 https://db.gcve.eu/vuln/ghsa-8g5p-hjg4-2rvf GHSA-8g5p-hjg4-2rvf 2026-10-02T12:30:40.652809+00:00

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not restrict access to a REST route that lists an author's courses, nor does it filter that listing by publication status, allowing unauthenticated users to read the titles and IDs of unpublished (draft, pending and private) courses.