CVEvulnerability

CVE-2026-88846

5.3 MEDIUM Published 2026-09-24 Modified 2026-09-24 Official page ↗
Status
Deferred
Published
2026-09-24
Last modified
2026-09-24
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weaknesses
CWE-862

Description

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not check whether user registration is enabled on the site before creating an account through one of its front-end registration flows, allowing unauthenticated users to create accounts, and be logged into them, on sites where registration has been deliberately disabled.

Related

Weakness · CWE (1)

  • CWE-862 Missing Authorization weakness

References