CVE-2024-5973
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.3.24 does not prevent students from creating instructor accounts, which could be used to get access to functionalities they shouldn't have.
- Score
- CVSS 3.1 9.1 Critical
- Status
- Modified - contact@wpscan.com
- Published
- 2024-07-22
- Last modified
- 2025-08-27
Affected products
- Masterstudy Lms Wordpress Plugin (Masterstudy Lms Wordpress Plugin)
- Masterstudy Lms (Stylemixthemes)
- Masterstudy Lms Wordpress Plugin (Unknown)
References
- https://wpscan.com/vulnerability/59abfb7c-d5ea-45f2-ab9a-4391978e3805/
