CVE-2022-0441

CVE-2022-0441 root@kitploit: Title: WordPress Plugin MasterStudy LMS 2.7.5 - Unauthenticated Admin Account Creation Date: 16.02.2022 Author: Numan Türle CVE: CVE-2022-0441 Software Link: https://wordpress.org/plugins/masterstudy-lms-learning-management-system/ Version: 2.7.6 安装 root@kitploit: git...

MasterStudy LMS < 3.7.46 - Unauthenticated Student Statistics Disclosure

MasterStudy LMS WordPress plugin before 3.7.46 contains an information disclosure vulnerability caused by missing authorization checks in student learning statistics, letting unauthenticated attackers access sensitive user course data, exploit requires no authentication. id: CVE-2026-81199 info:...

CVE-2022-0441

在 WordPress 上的 MasterStudy LMS 插件 2.7.5 及之前版本中发现了一个被归类为严重的漏洞（WordPress 插件）。该漏洞影响组件 New Account Handler 的未知部分。通过对未知输入的操作，导致了权限管理漏洞。该漏洞的 CWE 定义为 CWE-269。软件未能正确地为参与者分配、修改、跟踪或检查权限，从而为该参与者创建了非预期的控制范围。已知其影响涉及机密性、完整性和可用性。 该弱点于 2022 年 3 月 7 日以编号 2667195 披露。公告可在 wpscan.com 获取。自 2022 年 2 月 1 日起，该漏洞被命名为...

CVE-2022-0441

在 WordPress 上的 MasterStudy LMS Plugin（WordPress 插件）2.7.5 及之前版本中发现了一个被归类为严重的漏洞。该漏洞影响 New Account Handler 组件的某个未知部分。对未知输入进行操纵会导致权限管理漏洞。该漏洞的 CWE 定义为 CWE-269。该软件未能正确地为参与者分配、修改、跟踪或检查权限，从而为该参与者创建了非预期的控制范围。已知其影响会危害机密性、完整性和可用性。 该弱点于 03/07/2022 以编号 2667195 披露。公告可在 wpscan.com 获取。该漏洞自 02/01/2022 起被命名为...

CVE-2024-1512

CVE-2024-1512 概念验证 漏洞概述 CVE-2024-1512 披露了 MasterStudy LMS WordPress 插件中的一个严重漏洞，具体涉及 /lms/stm-lms/order/items REST 路由的实现。该问题源于插件未能正确转义 'user' 参数，同时 SQL 查询的预处理也不充分。因此，攻击者可以通过操纵 'user' 参数向查询中注入恶意 SQL 代码。该漏洞为基于 UNION 的 SQL 注入攻击提供了便利，攻击者可借此将额外的 SQL...

CVE-2023-4278

CVE-2023-4278 root@kitploit: Exploit Title: Wordpress Plugin Masterstudy LMS = 3.0.17 - Unauthenticated Instructor Account Creation Google Dork: inurl:/user-public-account Vendor Homepage: https://wordpress.org/plugins/masterstudy-lms-learning-management-system/ Software Link:...

MasterStudy LMS WordPress Plugin <= 3.2.5 - SQL Injection

The MasterStudy LMS WordPress Plugin for Online Courses and Education plugin for WordPress is vulnerable to union based SQL Injection via the 'user' parameter of the /lms/stm-lms/order/items REST route in all versions up to, and including, 3.2.5 due to insufficient escaping on the user supplied...

MasterStudy LMS <2.7.6 - Improper Access Control

WordPress MasterStudy LMS plugin before 2.7.6 is susceptible to improper access control. The plugin does not validate some parameters given when registering a new account, which can allow an attacker to register as an admin, thus potentially being able to obtain sensitive information, modify data...

CVE-2026-81199

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not perform an authorization check before returning a student's learning statistics, allowing unauthenticated attackers to disclose the course counts, points, certificates, quiz and assignment totals of any registered user...

CVE-2026-81196

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not properly verify ownership of quiz question identifiers, allowing users with instructor access to read other instructors' quiz questions, including the correct answers and explanations...

CVE-2026-81197

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not restrict access to a REST route that lists an author's courses, nor does it filter that listing by publication status, allowing unauthenticated users to read the titles and IDs of unpublished draft, pending and private...

CVE-2026-81194

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not properly verify authorization when retrieving order line-item data, allowing any authenticated user including Subscribers to read other instructors' course sales records by supplying another user's identifier...

CVE-2026-81195

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not perform an authorization check before returning per-student course enrollment and progress data, allowing unauthenticated attackers to disclose the enrolled courses and learning progress of any registered user...

CVE-2026-81198

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not properly verify ownership of a curriculum object before acting on it, allowing authenticated users with the instructor role to delete or modify curriculum sections and materials belonging to courses owned by other...

EUVD-2026-69852

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not perform an authorization check before returning a student's learning statistics, allowing unauthenticated attackers to disclose the course counts, points, certificates, quiz and assignment totals of any registered user...

WordPress MasterStudy LMS WordPress Plugin plugin < 3.7.46 - Instructor+ Cross-Course Curriculum Deletion and Tampering vulnerability

Instructor+ Cross-Course Curriculum Deletion and Tampering vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin MasterStudy LMS versions 3.7.46...

CVE-2026-81198 MasterStudy LMS < 3.7.46 - Instructor+ Cross-Course Curriculum Deletion and Tampering via IDOR

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not properly verify ownership of a curriculum object before acting on it, allowing authenticated users with the instructor role to delete or modify curriculum sections and materials belonging to courses owned by other...

CVE-2026-81198

MasterStudy LMS WordPress plugin (versions before 3.7.46 ) contains an IDOR (Insecure Direct Object Reference) flaw: the plugin does not properly verify ownership of a curriculum object before acting on it. This allows authenticated users with the instructor role to delete or modify curriculum se...

CVE-2026-81199

MasterStudy LMS WordPress Plugin versions before 3.7.46 contain an unauthenticated information disclosure vulnerability in the student/stats REST route . The endpoint fails to perform an authorization check before returning a student's learning statistics, allowing any unauthenticated attacker to...

WordPress MasterStudy LMS WordPress Plugin plugin < 3.7.46 - Unauthenticated Student Statistics Disclosure vulnerability

Unauthenticated Student Statistics Disclosure vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin MasterStudy LMS versions 3.7.46...