{"id":"CVE-2026-88844","title":"The MasterStudy LMS WordPress Plugin  WordPress plugin before 3.7.50 does not verify that the requesting user owns the course before returning its enrolled-student data, allowing users with the MasterStudy LMS WordPress Plugin  WordPress…","summary":"The MasterStudy LMS WordPress Plugin  WordPress plugin before 3.7.50 does not verify that the requesting user owns the course before returning its enrolled-student data, allowing users with the MasterStudy LMS WordPress Plugin  WordPress…","severity":"low","cvss":2.7,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-639"],"product":"MasterStudy LMS WordPress Plugin","affected":["masterstudy_lms_wordpress_plugin >= 3.6.2 < 3.7.50"],"published":"2026-09-18","updated":"2026-09-18","sourceUpdated":"2026-09-18T19:08:32.830","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-88844","references":[{"url":"https://wpscan.com/vulnerability/13b4f5c4-db4a-4bc2-b092-07747ee790e6/","label":"contact@wpscan.com"}],"tags":["nvd","cve.org"],"epss":0.00179,"epssPercentile":0.0769,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-18T11:01:27.204485Z"},"ingestedAt":"2026-09-18T06:36:37.987Z","slug":"CVE-2026-88844","body":"## Overview\n\nThe MasterStudy LMS WordPress Plugin  WordPress plugin before 3.7.50 does not verify that the requesting user owns the course before returning its enrolled-student data, allowing users with the MasterStudy LMS WordPress Plugin  WordPress plugin before 3.7.50's Instructor role to disclose the names and email addresses of students enrolled in other instructors' courses.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":15,"depthScoreParts":{"impact":14.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":206759,"id":"CVE-2026-88844","ts":1789731639327,"field":"cvss","old":null,"new":"2.7"},{"seq":206758,"id":"CVE-2026-88844","ts":1789731639327,"field":"severity","old":"none","new":"low"}]}