https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-02T11:31:33.941050+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-81199 CVE-2026-81199 — MasterStudy LMS < 3.7.46 - Unauthenticated Student Statistics Disclosure via student/stats REST Route 2026-10-02T11:31:33.942748+00:00

Affected: Unknown MasterStudy LMS WordPress Plugin

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not perform an authorization check before returning a student's learning statistics, allowing unauthenticated attackers to disclose the course counts, points, certificates, quiz and assignment totals of any registered user.