https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T02:18:33.676149+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-361675 EUVD-2026-361675 2026-10-07T02:18:33.726704+00:00 EUVD-2026-361675 https://cve.radiocsirt.org/vuln/fkie_cve-2026-81200 fkie_cve-2026-81200 2026-10-07T02:18:33.726742+00:00

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.42 does not correctly restrict access to order information, allowing any user with the instructor role to read other users' order billing details, including name, email address, phone number and postal address, by enumerating order IDs.

 https://cve.radiocsirt.org/vuln/ghsa-wfqg-5qqg-7qjc GHSA-wfqg-5qqg-7qjc 2026-10-07T02:18:33.726787+00:00

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.42 does not correctly restrict access to order information, allowing any user with the instructor role to read other users' order billing details, including name, email address, phone number and postal address, by enumerating order IDs.