CVE-2022-0441

MasterStudy LMS 플러그인 2.7.5 이하 버전에서 WordPress WordPress 플러그인에 치명적인 취약점이 발견되었습니다. 이 취약점은 New Account Handler 구성 요소의 알 수 없는 부분에 영향을 미칩니다. 알 수 없는 입력을 통한 조작으로 인해 권한 관리 취약점이 발생합니다. 취약점의 CWE 정의는 CWE-269입니다. 소프트웨어가 액터에 대한 권한을 올바르게 할당, 수정, 추적 또는 확인하지 않아 해당 액터에 대한 의도하지 않은 제어 영역이 생성됩니다. 이 영향으로 기밀성, 무결성 및 가용...

CVE-2022-0441

MasterStudy LMS 플러그인 2.7.5까지의 WordPressWordPress 플러그인에서 중요도가 높은 취약점이 발견되었습니다. 이 취약점은 New Account Handler 구성 요소의 알 수 없는 부분에 영향을 미칩니다. 알 수 없는 입력을 통한 조작으로 권한 관리 취약점이 발생합니다. 이 취약점에 대한 CWE 정의는 CWE-269입니다. 이 소프트웨어는 액터에 대한 권한을 올바르게 할당, 수정, 추적 또는 확인하지 않아 해당 액터에게 의도하지 않은 통제 범위를 생성합니다. 영향으로는 기밀성, 무결성 및 가용성...

CVE-2023-4278

CVE-2023-4278 Exploit Title: Wordpress Plugin Masterstudy LMS = 3.0.17 - Unauthenticated Instructor Account Creation Google Dork: inurl:/user-public-account Vendor Homepage: https://wordpress.org/plugins/masterstudy-lms-learning-management-system/ Software Link: https://stylemixthemes.com Version...

MasterStudy LMS < 3.7.46 - Unauthenticated Student Statistics Disclosure

MasterStudy LMS WordPress plugin before 3.7.46 contains an information disclosure vulnerability caused by missing authorization checks in student learning statistics, letting unauthenticated attackers access sensitive user course data, exploit requires no authentication. id: CVE-2026-81199 info:...

CVE-2022-0441

CVE-2022-0441 Title: WordPress Plugin MasterStudy LMS 2.7.5 - Unauthenticated Admin Account Creation Date: 16.02.2022 Author: Numan Türle CVE: CVE-2022-0441 Software Link: https://wordpress.org/plugins/masterstudy-lms-learning-management-system/ Version: 2.7.6 安装 git clone...

MasterStudy LMS WordPress Plugin <= 3.2.5 - SQL Injection

The MasterStudy LMS WordPress Plugin for Online Courses and Education plugin for WordPress is vulnerable to union based SQL Injection via the 'user' parameter of the /lms/stm-lms/order/items REST route in all versions up to, and including, 3.2.5 due to insufficient escaping on the user supplied...

CVE-2024-1512

CVE-2024-1512 개념 증명 취약점 개요 CVE-2024-1512는 MasterStudy LMS WordPress 플러그인, 특히 /lms/stm-lms/order/items REST 경로의 구현에서 중요한 취약점을 노출합니다. 이 문제는 플러그인이 'user' 매개변수를 적절히 이스케이프하지 못하고 SQL 쿼리를 부적절하게 준비한 데서 발생합니다. 결과적으로 공격자는 'user' 매개변수를 조작하여 쿼리에 악성 SQL 코드를 삽입할 수 있습니다. 이 취약점은 UNION 기반 SQL 인젝션 공격을 용이하게 하며, 공격자...

CVE-2026-88848

The MasterStudy LMS WordPress plugin from 1.9 before 3.7.50 does not verify that a course a member asks to enrol in is covered by their membership plan, nor that the plan identifier submitted with the request is one they actually hold, allowing any member to enrol themselves into restricted paid...

CVE-2026-88848

The MasterStudy LMS WordPress plugin (versions 1.9 to

CVE-2026-88848 MasterStudy LMS 1.9 - < 3.7.50 - Subscriber+ Membership Plan Quota and Category Restriction Bypass

The MasterStudy LMS WordPress plugin from 1.9 before 3.7.50 does not verify that a course a member asks to enrol in is covered by their membership plan, nor that the plan identifier submitted with the request is one they actually hold, allowing any member to enrol themselves into restricted paid...

EUVD-2026-86627

The MasterStudy LMS WordPress plugin from 1.9 before 3.7.50 does not verify that a course a member asks to enrol in is covered by their membership plan, nor that the plan identifier submitted with the request is one they actually hold, allowing any member to enrol themselves into restricted paid...

CVE-2026-88848 MasterStudy LMS 1.9 - < 3.7.50 - Subscriber+ Membership Plan Quota and Category Restriction Bypass

The MasterStudy LMS WordPress plugin from 1.9 before 3.7.50 does not verify that a course a member asks to enrol in is covered by their membership plan, nor that the plan identifier submitted with the request is one they actually hold, allowing any member to enrol themselves into restricted paid...

WordPress MasterStudy LMS plugin < 3.7.50 - Subscriber+ Membership Plan Quota and Category Restriction Bypass vulnerability

Subscriber+ Membership Plan Quota and Category Restriction Bypass vulnerability discovered by Arman Kumar in WordPress Plugin MasterStudy LMS versions 3.7.50...

WordPress MasterStudy LMS WordPress Plugin plugin 2.3.0-3.7.49 - Unauthenticated Account Creation with Registration Disabled vulnerability

Unauthenticated Account Creation with Registration Disabled vulnerability discovered by vuxvinh in WordPress Plugin MasterStudy LMS versions 2.3.0-3.7.49...

MasterStudy LMS <2.7.6 - Improper Access Control

WordPress MasterStudy LMS plugin before 2.7.6 is susceptible to improper access control. The plugin does not validate some parameters given when registering a new account, which can allow an attacker to register as an admin, thus potentially being able to obtain sensitive information, modify data...

CVE-2026-88848: Incorrect Authorization

The MasterStudy LMS WordPress plugin from 1.9 before 3.7.50 does not verify that a course a member asks to enrol in is covered by their membership plan, nor that the plan identifier submitted with the request is one they actually hold, allowing any member to enrol themselves into restricted paid...

PT-2026-98419

Name of the Vulnerable Software and Affected Versions MasterStudy LMS WordPress plugin versions 1.9 through 3.7.49 Description Insufficient verification occurs when a member requests enrollment in a course. The plugin fails to confirm if the requested course is included in the user's membership...

CVE-2026-88843

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not validate one of its display-style settings before using it to build a template path, allowing users with the Contributor role and above to include and execute arbitrary local PHP files on the server. An equivalent path w...

CVE-2026-88846

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not check whether user registration is enabled on the site before creating an account through one of its front-end registration flows, allowing unauthenticated users to create accounts, and be logged into them, on sites wher...

CVE-2026-88847

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not verify that a user is enrolled in a course before recording lesson completions against it, allowing any authenticated user, such as a subscriber, to create course progress records for courses they have no access to...