Unauthenticated Privilege Escalation Vulnerability in MasterStudy LMS Plugin

CVE-2024-2409

Summary

The MasterStudy LMS plugin for WordPress exhibits a vulnerability that allows unauthenticated attackers to escalate privileges, particularly gaining administrator-level access through the _register_user() function linked with the 'wp_ajax_nopriv_stm_lms_register' AJAX action. This occurs due to inadequate validation checks present in all versions prior to 3.3.2. When the LMS Forms Editor add-on is enabled, this flaw enables malicious actors to exploit the system and register themselves or others with elevated permissions, posing serious security risks to any website utilizing this plugin. Website administrators are urged to update to the latest version and review their security configurations.

References