high7.5Public exploit code
CVE-2023-4278
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.0.18 does not have proper checks in place during registration allowing anyone to register on the…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Wordpress Plugin Masterstudy LMS - 3.0.17 - Unauthenticated Instructor Account Creation2023-10-09 · webapps · php
Impact
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.0.18 does not have proper checks in place during registration allowing anyone to register on the site as an instructor. They can then add courses and/or posts.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Stylemixthemes | Masterstudy Lms | before 3.0.18 |
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/175007/WordPress-Masterstudy-LMS-3.0.17-Account-Creation.html
- https://wpscan.com/vulnerability/cb3173ec-9891-4bd8-9d05-24fe805b5235
- http://packetstormsecurity.com/files/175007/WordPress-Masterstudy-LMS-3.0.17-Account-Creation.html
- https://wpscan.com/vulnerability/cb3173ec-9891-4bd8-9d05-24fe805b5235