https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-28T16:18:58.990550+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-81339 fkie_cve-2026-81339 2026-09-28T16:18:59.022718+00:00

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not perform a per-object ownership check when returning a quiz attempt result, allowing any authenticated user with a minimal (subscriber) role to read other students' quiz grades, pass/fail status and attempt timestamps by referencing an attempt identifier belonging to another user.

 https://db.gcve.eu/vuln/ghsa-fj8j-x93w-h29w GHSA-fj8j-x93w-h29w 2026-09-28T16:18:59.022789+00:00

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not perform a per-object ownership check when returning a quiz attempt result, allowing any authenticated user with a minimal (subscriber) role to read other students' quiz grades, pass/fail status and attempt timestamps by referencing an attempt identifier belonging to another user.