CVE-2024-5973

MasterStudy LMS < 3.3.24 - Privilege Escalation to Instructor

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.3.24 does not prevent students from creating instructor accounts, which could be used to get access to functionalities they shouldn't have.

Affected

MasterStudy LMS WordPress Plugin

CVSS v3.1 NVD

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1 CNA

9.1 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS

0.49% chance of exploitation in the next 30 days, 41st percentile

Published

2024-07-22

Updated

2025-08-27

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/59abfb7c-d5ea-45f2-ab9a-4391978e3805/

Security advisories

• https://wpscan.com/vulnerability/59abfb7c-d5ea-45f2-ab9a-4391978e3805

References

• CVE Record
• NVD entry