CVE-2026-118090HIGH NVDCVSS Score 8.8Severity HIGHPublished Oct 30, 2026Vendor unknownDescriptionSubscriber PHP Object Injection in MasterStudy LMS <= 3.7.55 versions.Referenceshttps://patchstack.com/database/wordpress/plugin/masterstudy-lms-learning-management-system/vulnerability/wordpress-masterstudy-lms-plugin-3-7-55-php-object-injection-vulnerability?_s_id=cve