https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 14:54:49 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-81194 <p>The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not properly verify authorization when retrieving order line-item data, allowing any authenticated user including Subscribers to read other instructors&#39; course sales records by supplying another user&#39;s identifier.</p> <p>The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not properly verify authorization when retrieving order line-item data, allowing any authenticated user including Subscribers to read other instructors&#39; course sales records by supplying another user&#39;s identifier.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-81194 https://vulnerability.circl.lu/vuln/ghsa-rj36-pvv3-3g3h <p>The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not properly verify authorization when retrieving order line-item data, allowing any authenticated user including Subscribers to read other instructors&#39; course sales records by supplying another user&#39;s identifier.</p> <p>The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not properly verify authorization when retrieving order line-item data, allowing any authenticated user including Subscribers to read other instructors&#39; course sales records by supplying another user&#39;s identifier.</p> https://vulnerability.circl.lu/vuln/ghsa-rj36-pvv3-3g3h