Live › vulnerability › CVE-2026-118092
The MasterStudy LMS learning management plugin for WordPress has a missing authorization check, so access control is not enforced on some functions. The sources do not say exactly what data or actions an attacker can reach.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 15:25 UTC. All times on this page are UTC.
Sites running the MasterStudy LMS WordPress plugin at version 3.7.55 or earlier are listed as affected. The sources do not say which functions lack the check or whether a logged-in account is required, so the exposure of any given site is unknown.
No product ranges from the sources yet.
wp-content/plugins/masterstudy-lms-learning-management-system/3.7.55; versions up to and including it are listed as affected3.7.55 (the sources do not name the fixed version)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in StylemixThemes MasterStudy LMS masterstudy-lms-learning-management-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MasterStudy LMS: from n/a through 3.7.55.
This page as .md · .json · in your agent: get_signal("CVE-2026-118092")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.