CVE-2026-88846

Name of the Vulnerable Software and Affected Versions MasterStudy LMS WordPress Plugin versions prior to 3.7.50

Description The plugin fails to verify if user registration is enabled on the site before processing account creation through its front-end registration flows. This allows unauthenticated users to create accounts and log into them, even on sites where registration has been intentionally disabled.

Recommendations Update the plugin to version 3.7.50 or later.