Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
StylemixthemesMasterstudy Lms

10 matches found

CVE
CVE•added 2024/02/17 8:15 a.m.•100 views

CVE-2024-1512

The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to union based SQL Injection via the 'user' parameter of the /lms/stm-lms/order/items REST route in all versions up to, and including, 3.2.5 due to insufficient escaping on the user supplied p...

9.8CVSS9.5AI score0.93913EPSS
CVE
CVE•added 2024/04/09 7:15 p.m.•78 views

CVE-2024-1904

The MasterStudy LMS plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the search_posts function in all versions up to, and including, 3.2.13. This makes it possible for authenticated attackers, with subscriber-level access and above, to expose dr...

4.3CVSS8.9AI score0.0029EPSS
CVE
CVE•added 2024/03/13 4:15 p.m.•60 views

CVE-2024-2106

The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to Information Exposure in versions up to, and including, 3.2.10. This can allow unauthenticated attackers to extract sensitive data including all registered user's username and email addresse...

7.5CVSS5.6AI score0.02532EPSS
CVE
CVE•added 2024/04/09 7:15 p.m.•55 views

CVE-2024-3136

The MasterStudy LMS plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.3.3 via the 'template' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code ...

9.8CVSS9.8AI score0.45133EPSS
CVE
CVE•added 2024/03/29 9:15 a.m.•54 views

CVE-2024-2409

The MasterStudy LMS plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.3.1. This is due to insufficient validation checks within the _register_user() function called by the 'wp_ajax_nopriv_stm_lms_register' AJAX action. This makes it possible for unau...

9.8CVSS9.3AI score0.00421EPSS
CVE
CVE•added 2024/03/29 9:15 a.m.•54 views

CVE-2024-2411

The MasterStudy LMS plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.3.0 via the 'modal' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in ...

9.8CVSS9.8AI score0.0138EPSS
CVE
CVE•added 2024/05/02 5:15 p.m.•47 views

CVE-2024-3942

The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability check on several functions in versions up to, and including, 3.3.8. This makes it possible for authenticated ...

6.3CVSS6.5AI score0.0006EPSS
CVE
CVE•added 2024/09/25 3:15 p.m.•45 views

CVE-2024-43990

Insertion of Sensitive Information into Log File vulnerability in StylemixThemes Masterstudy LMS Starter.This issue affects Masterstudy LMS Starter: from n/a through 1.1.8.

5.3CVSS5.7AI score0.00148EPSS
CVE
CVE•added 2024/11/01 2:15 p.m.•38 views

CVE-2024-37094

Missing Authorization vulnerability in StylemixThemes MasterStudy LMS allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects MasterStudy LMS: from n/a through 3.2.12.

9.8CVSS8.3AI score0.00236EPSS
CVE
CVE•added 2024/07/22 6:15 a.m.•35 views

CVE-2024-5973

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.3.24 does not prevent students from creating instructor accounts, which could be used to get access to functionalities they shouldn't have.

9.1CVSS6.4AI score0.00711EPSS