CVE-2026-81342 PUBLISHED

MasterStudy LMS < 3.7.43 - Unauthenticated Open Redirect

Assigner: WPScan
Reserved: 26.08.2026 Published: 29.08.2026 Updated: 29.08.2026

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.43 does not validate a redirect parameter supplied during user registration before using it, allowing unauthenticated attackers to redirect users to arbitrary external URLs.

Product Status

Vendor Unknown
Product MasterStudy LMS WordPress Plugin
Versions Default: unaffected
  • affected from 0 to 3.7.43 (excl.)

Credits

  • Abiodun Victor finder
  • WPScan coordinator

References

Problem Types

  • CWE-601 URL Redirection to Untrusted Site ('Open Redirect') CWE