CVE-2024-1512

CVE-2024-1512 Prova de Conceito Visão Geral da Vulnerabilidade CVE-2024-1512 expõe uma vulnerabilidade crítica no MasterStudy LMS WordPress Plugin, especificamente na implementação da rota REST /lms/stm-lms/order/items. O problema decorre da falha do plugin em escapar adequadamente o parâmetro...

CVE-2022-0441

एक महत्वपूर्ण critical भेद्यता MasterStudy LMS Plugin 2.7.5 तक के संस्करणों में WordPress WordPress Plugin पर पाई गई। यह भेद्यता New Account Handler घटक के किसी अज्ञात भाग को प्रभावित करती है। किसी अज्ञात इनपुट के साथ छेड़छाड़ से विशेषाधिकार प्रबंधन भेद्यता उत्पन्न होती है। इस भेद्यता के लिए CWE...

CVE-2022-0441

CVE-2022-0441 root@kitploit: Title: WordPress Plugin MasterStudy LMS 2.7.5 - Unauthenticated Admin Account Creation Date: 16.02.2022 Author: Numan Türle CVE: CVE-2022-0441 Software Link: https://wordpress.org/plugins/masterstudy-lms-learning-management-system/ Version: 2.7.6 Instalação...

MasterStudy LMS WordPress Plugin <= 3.2.5 - SQL Injection

The MasterStudy LMS WordPress Plugin for Online Courses and Education plugin for WordPress is vulnerable to union based SQL Injection via the 'user' parameter of the /lms/stm-lms/order/items REST route in all versions up to, and including, 3.2.5 due to insufficient escaping on the user supplied...

CVE-2022-0441

MasterStudy LMS Plugin 2.7.5 तक वर्डप्रेस प्लगिन में एक गंभीर भेद्यता पाई गई। यह भेद्यता New Account Handler घटक के एक अज्ञात भाग को प्रभावित करती है। एक अज्ञात इनपुट के साथ की गई छेड़छाड़ विशेषाधिकार प्रबंधन भेद्यता की ओर ले जाती है। इस भेद्यता के लिए CWE परिभाषा CWE-269 है। सॉफ़्टवेयर किसी...

EUVD-2026-65159

Unauthenticated Arbitrary File Deletion in MasterStudy LMS = 3.7.42 versions...

CVE-2026-78284

Unauthenticated Arbitrary File Deletion in MasterStudy LMS = 3.7.42 versions...

CVE-2026-78284

CVE-2026-78284 is an unauthenticated arbitrary file deletion vulnerability in the MasterStudy LMS WordPress plugin, affecting versions 3.7.42 and earlier . An attacker can delete files on the server without any authentication or user interaction. The CVSS 3.1 base score is 8.6 (HIGH) , driven by ...

CVE-2026-78284 WordPress MasterStudy LMS plugin <= 3.7.42 - Arbitrary File Deletion vulnerability

Unauthenticated Arbitrary File Deletion in MasterStudy LMS = 3.7.42 versions...

CVE-2023-4278

CVE-2023-4278 !\vulnerable.png./vulnerable.png root@kitploit: Exploit Title: Wordpress Plugin Masterstudy LMS = 3.0.17 - Unauthenticated Instructor Account Creation Google Dork: inurl:/user-public-account Vendor Homepage: https://wordpress.org/plugins/masterstudy-lms-learning-management-system/...

CVE-2026-73404

Subscriber Broken Access Control in MasterStudy LMS = 3.7.41 versions...

CVE-2026-68568

Subscriber Privilege Escalation in MasterStudy LMS = 3.7.41 versions...

EUVD-2026-60807

Subscriber Broken Access Control in MasterStudy LMS = 3.7.41 versions...

CVE-2026-73404

Subscriber users of MasterStudy LMS plugin

CVE-2026-73404 WordPress MasterStudy LMS plugin <= 3.7.41 - Broken Access Control vulnerability

Subscriber Broken Access Control in MasterStudy LMS = 3.7.41 versions...

CVE-2026-73404

Subscriber Broken Access Control in MasterStudy LMS = 3.7.41 versions...

EUVD-2026-60936

Subscriber Privilege Escalation in MasterStudy LMS = 3.7.41 versions...

CVE-2026-68568

Subscriber Privilege Escalation in MasterStudy LMS = 3.7.41 versions...

CVE-2026-68568 WordPress MasterStudy LMS plugin <= 3.7.41 - Privilege Escalation vulnerability

Subscriber Privilege Escalation in MasterStudy LMS = 3.7.41 versions...

CVE-2026-68568

WordPress MasterStudy LMS plugin (≤ 3.7.41) allows authenticated subscribers to escalate privileges, likely by bypassing capability checks in REST endpoints or AJAX handlers. CVSS 6.3 (medium) — network attack, low privileges required. No in-the-wild exploitation reported. Upgrade to a patched ve...