CVE-2026-81342

The MasterStudy LMS WordPress plugin prior to version 3.7.43 is vulnerable due to improper validation of a redirect parameter during user registration, enabling unauthenticated attackers to redirect users to malicious external URLs. This flaw poses a significant risk of phishing attacks and user data exposure. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate potential exploitation.