CVE-2026-81198
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Sep 02, 2026
Vendor
unknown
Description
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not properly verify ownership of a curriculum object before acting on it, allowing authenticated users with the instructor role to delete or modify curriculum sections and materials belonging to courses owned by other instructors.