https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-05T07:03:04.738893+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2024-2409 fkie_cve-2024-2409 2026-10-05T07:03:04.752771+00:00

The MasterStudy LMS plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.3.1. This is due to insufficient validation checks within the _register_user() function called by the 'wp_ajax_nopriv_stm_lms_register' AJAX action. This makes it possible for unauthenticated attackers to register a user with administrator-level privileges when MasterStudy LMS Pro is installed and the LMS Forms Editor add-on is enabled.

 https://vulnerability.circl.lu/vuln/ghsa-62c6-x54m-9q5v GHSA-62c6-x54m-9q5v 2026-10-05T07:03:04.752954+00:00

The MasterStudy LMS plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.3.1. This is due to insufficient validation checks within the _register_user() function called by the 'wp_ajax_nopriv_stm_lms_register' AJAX action. This makes it possible for unauthenticated attackers to register a user with administrator-level privileges when MasterStudy LMS Pro is installed and the LMS Forms Editor add-on is enabled.

 https://vulnerability.circl.lu/vuln/gsd-2024-2409 gsd-2024-2409 2026-10-05T07:03:04.753001+00:00 gsd-2024-2409