What is CVE-2023-4278?

CVE-2023-4278 is a vulnerability in the MasterStudy LMS WordPress Plugin before version 3.0.18.

What is the severity of CVE-2023-4278?

CVE-2023-4278 has a severity rating of 7.5 (high).

How does CVE-2023-4278 affect the MasterStudy LMS plugin?

CVE-2023-4278 allows anyone to register on the site as an instructor in the MasterStudy LMS plugin before version 3.0.18, enabling them to add courses and/or posts.

How can I fix CVE-2023-4278 in the MasterStudy LMS plugin?

To fix CVE-2023-4278, you should update the MasterStudy LMS WordPress plugin to version 3.0.18 or higher.

Is there any additional information about CVE-2023-4278?

Yes, you can find more details about the vulnerability on the WPScan website at https://wpscan.com/vulnerability/cb3173ec-9891-4bd8-9d05-24fe805b5235.

Vulnerability/
CVE-2023-4278

Exploited

high

7.5

CWE

269

11/9/2023

21/11/2024

CVE-2023-4278: MasterStudy LMS < 3.0.18 - Unauthenticated Instructor Account Creation

First published: Mon Sep 11 2023(Updated: )

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.0.18 does not have proper checks in place during registration allowing anyone to register on the site as an instructor. They can then add courses and/or posts.

Credit: Revan Arifio contact@wpscan.com contact@wpscan.com

Affected Software	Affected Version	How to fix
StylemixThemes MasterStudy LMS WordPress	<3.0.18
	<3.0.18

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is CVE-2023-4278?
CVE-2023-4278 is a vulnerability in the MasterStudy LMS WordPress Plugin before version 3.0.18.
What is the severity of CVE-2023-4278?
CVE-2023-4278 has a severity rating of 7.5 (high).
How does CVE-2023-4278 affect the MasterStudy LMS plugin?
CVE-2023-4278 allows anyone to register on the site as an instructor in the MasterStudy LMS plugin before version 3.0.18, enabling them to add courses and/or posts.
How can I fix CVE-2023-4278 in the MasterStudy LMS plugin?
To fix CVE-2023-4278, you should update the MasterStudy LMS WordPress plugin to version 3.0.18 or higher.
Is there any additional information about CVE-2023-4278?
Yes, you can find more details about the vulnerability on the WPScan website at https://wpscan.com/vulnerability/cb3173ec-9891-4bd8-9d05-24fe805b5235.

collector/nvd-index
agent/type
exploited/true
collector/exploitdb-recent
source/ExploitDB
alias/CVE-2023-4278
agent/weakness
agent/references
agent/author
agent/severity
collector/mitre-cve
source/MITRE
agent/title
agent/description
agent/first-publish-date
collector/nvd-api
source/NVD
agent/software-canonical-lookup
agent/last-modified-date
agent/softwarecombine
agent/tags
agent/event
vendor/stylemixthemes
canonical/stylemixthemes masterstudy lms wordpress

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.