CVE-2024-5973
MasterStudy LMS < 3.3.24 - Privilege Escalation to Instructor
- State
- Published
- Severity
- 9.1 Critical
- Published
- Jul 22, 2024
- Updated
- Aug 27, 2025
- Reserved
- Jun 13, 2024
Description
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.3.24 does not prevent students from creating instructor accounts, which could be used to get access to functionalities they shouldn't have.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 9.1 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N | CISA-ADP |
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
MasterStudy LMS WordPress PluginUnknown |
|
References
- https://wpscan.com/vulnerability/59abfb7c-d5ea-45f2-ab9a-4391978e3805/exploitvdb-entrytechnical-description
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.