CyberRota Analysis
AI-GeneratedThe MasterStudy LMS WordPress Plugin prior to version 3.7.46 is vulnerable due to improper authorization checks, enabling any authenticated user, including Subscribers, to access and read other instructors' course sales records by manipulating user identifiers. This could lead to unauthorized disclosure of sensitive sales data, impacting the privacy of instructors' financial information. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate this risk.
Original NVD Description
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not properly verify authorization when retrieving order line-item data, allowing any authenticated user including Subscribers to read other instructors' course sales records by supplying another user's identifier.