https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T01:22:24.222649+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-371715 EUVD-2026-371715 2026-10-07T01:22:24.275180+00:00 EUVD-2026-371715 https://cve.radiocsirt.org/vuln/fkie_cve-2026-88844 fkie_cve-2026-88844 2026-10-07T01:22:24.275233+00:00

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not verify that the requesting user owns the course before returning its enrolled-student data, allowing users with the MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50's Instructor role to disclose the names and email addresses of students enrolled in other instructors' courses.

 https://cve.radiocsirt.org/vuln/ghsa-g869-5rh7-8rvf GHSA-g869-5rh7-8rvf 2026-10-07T01:22:24.275271+00:00

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not verify that the requesting user owns the course before returning its enrolled-student data, allowing users with the MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50's Instructor role to disclose the names and email addresses of students enrolled in other instructors' courses.