medium5.3

CVE-2026-28145

Insufficient Verification of Data Authenticity vulnerability in StylemixThemes MasterStudy LMS allows Manipulating User State.

Impact

Insufficient Verification of Data Authenticity vulnerability in StylemixThemes MasterStudy LMS allows Manipulating User State. This issue affects MasterStudy LMS: from n/a through 3.7.39.

Affected products

Product	Affected versions
MasterStudy LMS: From N/A	through 3.7.39.

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

CWE-345

References

NVD record
CVE.org record
https://patchstack.com/database/wordpress/plugin/masterstudy-lms-learning-management-system/vulnerability/wordpress-masterstudy-lms-plugin-3-7-39-broken-access-control-vulnerability?_s_id=cve