medium4.7
CVE-2026-81342
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.43 does not validate a redirect parameter supplied during user registration before using it, a…
Impact
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.43 does not validate a redirect parameter supplied during user registration before using it, allowing unauthenticated attackers to redirect users to arbitrary external URLs.
Affected products
| Product | Affected versions |
|---|---|
| MasterStudy LMS WordPress Plugin WordPress Plugin | before 3.7.43 |
Versions were read from the advisory text. No structured product data has been published for this record yet.