Information Exposure Vulnerability in MasterStudy LMS WordPress Plugin
CVE-2024-2106
Key Information:
- Vendor
Wordpress
- Vendor
- CVE Published:
- 13 March 2024
What is CVE-2024-2106?
The MasterStudy LMS WordPress Plugin, used for managing online courses and education, is affected by an Information Exposure vulnerability in versions up to and including 3.2.10. This flaw allows unauthenticated attackers to gain access to sensitive information, specifically the usernames and email addresses of all registered users. Such data can be exploited for further malicious activities, leading to potential account compromises and increased security risks for the affected users.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
MasterStudy LMS WordPress Plugin β for Online Courses and Education * <= 3.2.10
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved