CVE-2026-81200: The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.42 does not correctly restrict access to order informa

The MasterStudy LMS WordPress Plugin (a learning management system tool for WordPress) before version 3.7.42 has a security flaw where instructors can access other users' order billing information like names, emails, phone numbers, and addresses by guessing order ID numbers. This happens because the plugin doesn't properly check whether a user should be allowed to view that data before showing it to them.