CVE-2026-81196 — MasterStudy LMS < 3.7.46 - Instructor+ Quiz Answer Disclosure via IDOR

CVE-2026-81196

MasterStudy LMS < 3.7.46 - Instructor+ Quiz Answer Disclosure via IDOR PUBLISHED

Description (CNA)

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not properly verify ownership of quiz question identifiers, allowing users with instructor access to read other instructors' quiz questions, including the correct answers and explanations.

Affected (CNA)

Vendor / product	Versions
Unknown / MasterStudy LMS WordPress Plugin	affected 0 before 3.7.46

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/d11acb84-6dd0-4229-ac30-dba3ad6b9614/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.