https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-28T20:55:30.656955+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-88847 CVE-2026-88847 — MasterStudy LMS < 3.7.50 - Subscriber+ Lesson Completion Record Creation 2026-09-28T20:55:30.658262+00:00

Affected: Unknown MasterStudy LMS WordPress Plugin

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not verify that a user is enrolled in a course before recording lesson completions against it, allowing any authenticated user, such as a subscriber, to create course progress records for courses they have no access to.