PoC Index85,092 CVEs with PoCs

CVE-2026-81342

MasterStudy LMS < 3.7.43 - Unauthenticated Open Redirect

MEDIUM 4.7EPSS 0.3%

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.43 does not validate a redirect parameter supplied during user registration before using it, allowing unauthenticated attackers to redirect users to arbitrary external URLs.

Affected
MasterStudy LMS WordPress Plugin
CVSS v3.1 CNA
4.7 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
EPSS
0.29% chance of exploitation in the next 30 days, 20th percentile
Published
2026-08-29
Updated
2026-08-30

Proof-of-concept exploits (1)

References