CVE-2022-0441

एक महत्वपूर्ण critical भेद्यता MasterStudy LMS Plugin 2.7.5 तक के संस्करणों में WordPress WordPress Plugin पर पाई गई। यह भेद्यता New Account Handler घटक के किसी अज्ञात भाग को प्रभावित करती है। किसी अज्ञात इनपुट के साथ छेड़छाड़ से विशेषाधिकार प्रबंधन भेद्यता उत्पन्न होती है। इस भेद्यता के लिए CWE...

CVE-2024-1512

CVE-2024-1512 प्रूफ ऑफ कॉन्सेप्ट भेद्यता अवलोकन CVE-2024-1512, MasterStudy LMS WordPress प्लगइन में एक गंभीर भेद्यता उजागर करता है, विशेष रूप से /lms/stm-lms/order/items REST रूट के कार्यान्वयन में। यह समस्या प्लगइन द्वारा 'user' पैरामीटर को ठीक से escape न करने और SQL क्वेरी की अपर्याप्त तैयारी ...

CVE-2022-0441

CVE-2022-0441 root@kitploit: Title: WordPress Plugin MasterStudy LMS 2.7.5 - Unauthenticated Admin Account Creation Date: 16.02.2022 Author: Numan Türle CVE: CVE-2022-0441 Software Link: https://wordpress.org/plugins/masterstudy-lms-learning-management-system/ Version: 2.7.6 التثبيت root@kitploit...

MasterStudy LMS <2.7.6 - Improper Access Control

WordPress MasterStudy LMS plugin before 2.7.6 is susceptible to improper access control. The plugin does not validate some parameters given when registering a new account, which can allow an attacker to register as an admin, thus potentially being able to obtain sensitive information, modify data...

MasterStudy LMS WordPress Plugin <= 3.2.5 - SQL Injection

The MasterStudy LMS WordPress Plugin for Online Courses and Education plugin for WordPress is vulnerable to union based SQL Injection via the 'user' parameter of the /lms/stm-lms/order/items REST route in all versions up to, and including, 3.2.5 due to insufficient escaping on the user supplied...

CVE-2022-0441

MasterStudy LMS Plugin 2.7.5 तक वर्डप्रेस प्लगिन में एक गंभीर भेद्यता पाई गई। यह भेद्यता New Account Handler घटक के एक अज्ञात भाग को प्रभावित करती है। एक अज्ञात इनपुट के साथ की गई छेड़छाड़ विशेषाधिकार प्रबंधन भेद्यता की ओर ले जाती है। इस भेद्यता के लिए CWE परिभाषा CWE-269 है। सॉफ़्टवेयर किसी...

EUVD-2026-65159

Unauthenticated Arbitrary File Deletion in MasterStudy LMS = 3.7.42 versions...

CVE-2026-78284

Unauthenticated Arbitrary File Deletion in MasterStudy LMS = 3.7.42 versions...

CVE-2026-78284

CVE-2026-78284 is an unauthenticated arbitrary file deletion vulnerability in the MasterStudy LMS WordPress plugin, affecting versions 3.7.42 and earlier . An attacker can delete files on the server without any authentication or user interaction. The CVSS 3.1 base score is 8.6 (HIGH) , driven by ...

CVE-2026-78284 WordPress MasterStudy LMS plugin <= 3.7.42 - Arbitrary File Deletion vulnerability

Unauthenticated Arbitrary File Deletion in MasterStudy LMS = 3.7.42 versions...

CVE-2023-4278

CVE-2023-4278 !\vulnerable.png./vulnerable.png root@kitploit: Exploit Title: Wordpress Plugin Masterstudy LMS = 3.0.17 - Unauthenticated Instructor Account Creation Google Dork: inurl:/user-public-account Vendor Homepage: https://wordpress.org/plugins/masterstudy-lms-learning-management-system/...

CVE-2026-73404

Subscriber Broken Access Control in MasterStudy LMS = 3.7.41 versions...

CVE-2026-68568

Subscriber Privilege Escalation in MasterStudy LMS = 3.7.41 versions...

EUVD-2026-60807

Subscriber Broken Access Control in MasterStudy LMS = 3.7.41 versions...

CVE-2026-73404 WordPress MasterStudy LMS plugin <= 3.7.41 - Broken Access Control vulnerability

Subscriber Broken Access Control in MasterStudy LMS = 3.7.41 versions...

CVE-2026-73404

Subscriber users of MasterStudy LMS plugin

CVE-2026-73404

Subscriber Broken Access Control in MasterStudy LMS = 3.7.41 versions...

EUVD-2026-60936

Subscriber Privilege Escalation in MasterStudy LMS = 3.7.41 versions...

CVE-2026-68568

Subscriber Privilege Escalation in MasterStudy LMS = 3.7.41 versions...

CVE-2026-68568

WordPress MasterStudy LMS plugin (≤ 3.7.41) allows authenticated subscribers to escalate privileges, likely by bypassing capability checks in REST endpoints or AJAX handlers. CVSS 6.3 (medium) — network attack, low privileges required. No in-the-wild exploitation reported. Upgrade to a patched ve...