CVE-2022-0441: MasterStudy LMS < 2.7.6 - Unauthenticated Admin Account Creation
The MasterStudy LMS WordPress plugin before 2.7.6 does to validate some parameters given when registering a new account, allowing unauthenticated users to register as an admin
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2022-0441?
CVE-2022-0441 is a vulnerability in the MasterStudy LMS WordPress plugin before version 2.7.6 that allows unauthenticated users to register as an admin.
What is the severity of CVE-2022-0441?
CVE-2022-0441 has a severity rating of 9.8 (Critical).
How does CVE-2022-0441 affect the MasterStudy LMS WordPress plugin?
CVE-2022-0441 affects the MasterStudy LMS WordPress plugin before version 2.7.6 by allowing unauthenticated users to register as an admin.
Is there a fix available for CVE-2022-0441?
Yes, the fix for CVE-2022-0441 is to update the MasterStudy LMS WordPress plugin to version 2.7.6 or later.
Where can I find more information about CVE-2022-0441?
You can find more information about CVE-2022-0441 at the following references: [https://plugins.trac.wordpress.org/changeset/2667195](https://plugins.trac.wordpress.org/changeset/2667195) and [https://wpscan.com/vulnerability/173c2efe-ee9c-4539-852f-c242b4f728ed](https://wpscan.com/vulnerability/173c2efe-ee9c-4539-852f-c242b4f728ed).