PT-2024-37284 · WordPress · Masterstudy Lms Wordpress Plugin

Jaime F. Murillo · Published 2024-07-22 · Updated 2024-08-01 · CVE-2024-5973

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions: The MasterStudy LMS WordPress Plugin versions prior to 3.3.24

Description: The issue allows students to create instructor accounts, potentially granting them access to unauthorized functionalities.

Recommendations: For versions prior to 3.3.24, update to version 3.3.24 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2024-5973

Affected Products

Masterstudy Lms Wordpress Plugin

References · 6

• 🔥 https://wpscan.com/vulnerability/59abfb7c-d5ea-45f2-ab9a-4391978e3805 · Exploit
• https://osv.dev/vulnerability/CVE-2024-5973 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-5973 · Security Note
• https://t.me/cvedetector/1379 · Telegram Post
• https://t.me/cvenotify/86972 · Telegram Post
• https://t.me/cvenotify/87409 · Telegram Post