Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-28145 EUVD-2026-51536GHSA-f3rr-323h-3jm2

WordPress MasterStudy LMS plugin <= 3.7.39 - Broken Access Control vulnerability

Published Jul 31, 2026 · Updated Jul 31, 2026 · Assigned by Patchstack

Vendor: StylemixThemes Product: MasterStudy LMS

Description

Insufficient Verification of Data Authenticity vulnerability in StylemixThemes MasterStudy LMS allows Manipulating User State.

This issue affects MasterStudy LMS: from n/a through 3.7.39.

Affected products

VendorProductAffectedFixed
StylemixThemes MasterStudy LMS ≤ 3.7.39 —

References