Information Exposure Vulnerability in MasterStudy LMS WordPress Plugin

CVE-2024-2106

What is CVE-2024-2106?

The MasterStudy LMS WordPress Plugin, used for managing online courses and education, is affected by an Information Exposure vulnerability in versions up to and including 3.2.10. This flaw allows unauthenticated attackers to gain access to sensitive information, specifically the usernames and email addresses of all registered users. Such data can be exploited for further malicious activities, leading to potential account compromises and increased security risks for the affected users.

References