cleantalk
Vulnerabilities and Security Researches

MasterStudy LMS WordPress Plugin – for Online Courses and Education, CVE-2026-28145

CVE, Research URL

CVE-2026-28145

Published on
Jul 31, 2026
Research Description
Insufficient Verification of Data Authenticity vulnerability in StylemixThemes MasterStudy LMS allows Manipulating User State. This issue affects MasterStudy LMS: from n/a through 3.7.39.
Affected versions
max 3.7.40.
Status
vulnerable