CVE-2026-57640

Subscriber Broken Access Control in MasterStudy LMS <= 3.7.30 versions.

Credits

lagi bljr | Patchstack Bug Bounty Program

References

https://patchstack.com/database/wordpress/plugin/masterstudy-lms-learning-management-system/vulnerability/wordpress-masterstudy-lms-plugin-3-7-30-broken-access-control-vulnerability?_s_id=cve