VULNERABILITY INTELLIGENCE
CVE-2024-5973
CVSS score8.8 HIGH
EPSS probability0.49%
CISA KEVNot currently listed
Published2024-07-22
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.3.24 does not prevent students from creating instructor accounts, which could be used to get access to functionalities they shouldn't have.
Weakness classification
- nvd@nist.gov: NVD-CWE-noinfo
Primary references
- contact@wpscan.com — Exploit, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory