Lucene search

CVE-2024-24882

🗓️ 17 May 2024 09:24:15Reported by PatchstackType

Improper privilege management in Masteriyo LMS allows privilege escalatio

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 6
Patchstack	WordPress Masteriyo - LMS Plugin <= 1.7.2 is vulnerable to Privilege Escalation	5 Apr 202400:00	–	patchstack
WPVulnDB	Masteriyo - LMS < 1.7.3 - Unauthenticated Privilege Escalation	11 Apr 202400:00	–	wpvulndb
Cvelist	CVE-2024-24882 WordPress LMS by Masteriyo plugin <= 1.7.2 - Privilege Escalation vulnerability	17 May 202408:48	–	cvelist
Vulnrichment	CVE-2024-24882 WordPress LMS by Masteriyo plugin <= 1.7.2 - Privilege Escalation vulnerability	17 May 202408:48	–	vulnrichment
NVD	CVE-2024-24882	17 May 202409:15	–	nvd
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (April 1, 2024 to April 7, 2024)	11 Apr 202417:23	–	wordfence

Vulners

Vulnrichment

Node

masteriyo lmsRange≤1.7.2wordpress

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "learning-management-system",
    "product": "LMS",
    "vendor": "Masteriyo",
    "versions": [
      {
        "changes": [
          {
            "at": "1.7.3",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "1.7.2",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
patchstack	www.patchstack.com/database/vulnerability/learning-management-system/wordpress-lms-by-masteriyo-plugin-1-7-2-privilege-escalation-vulnerability

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

17 May 2024 09:15Current

6.8Medium risk

Vulners AI Score6.8

CVSS39.8

EPSS0.00214

SSVC

CWE-269