CVE-2026-81026
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
29/08/2026
Last modified:
29/08/2026
Description
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.40 does not verify the amount, receiver, currency or status of a payment notification before marking the corresponding order completed, allowing unauthenticated users to complete full-price orders and gain access to paid content by paying only a token amount.