CVE-2026-88848
Received Received - Intake

Membership Bypass in MasterStudy LMS WordPress Plugin

Publication date: 2026-09-25

Last updated on: 2026-09-25

Assigner: WPScan

Description
The MasterStudy LMS WordPress plugin from 1.9 before 3.7.50 does not verify that a course a member asks to enrol in is covered by their membership plan, nor that the plan identifier submitted with the request is one they actually hold, allowing any member to enrol themselves into restricted paid courses outside their plan and beyond the number of courses it entitles them to.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-25
Last Modified
2026-09-25
Generated
2026-09-25
AI Q&A
2026-09-25
EPSS Evaluated
N/A
NVD
CVE-2026-88848
EUVD
EUVD-2026-86627

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
masterstudy lms to 3.7.50 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects the MasterStudy LMS WordPress plugin versions 1.9 to 3.7.49. It allows users with a Subscriber or higher role to bypass membership plan restrictions and enroll in paid courses they are not authorized to access. The flaw occurs because the plugin does not verify if a requested course is covered by the user's membership plan or if the plan identifier matches their actual plan.

Detection Guidance

Check if the MasterStudy LMS plugin version is between 1.9 and 3.7.49. Use WordPress admin panel or run a command like 'wp plugin list' if using WP-CLI to verify the installed version.

Impact Analysis

If you use the MasterStudy LMS plugin in versions 1.9 to 3.7.49, attackers with basic user access could enroll in restricted paid courses without paying or having the proper membership. This could lead to unauthorized access to premium content, potential data exposure, and misuse of paid features.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive course materials, potentially violating data protection requirements under GDPR or HIPAA if such data is exposed. Organizations using the vulnerable plugin may face compliance risks due to insufficient access controls.

Mitigation Strategies

Update the MasterStudy LMS plugin to version 3.7.50 or later immediately. Disable user enrollment features temporarily if an update is not possible right away.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-88848. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart