CVE-2024-2106: MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.10 - Basic Information Exposure via REST route
The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to Information Exposure in versions up to, and including, 3.2.10. This can allow unauthenticated attackers to extract sensitive data including all registered user's username and email addresses which can be used to help perform future attacks.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-2106?
CVE-2024-2106 has been classified as a medium severity vulnerability due to its potential to expose sensitive user data.
How do I fix CVE-2024-2106?
To remediate CVE-2024-2106, update the MasterStudy LMS WordPress Plugin to version 3.2.11 or later.
What data can be exposed by CVE-2024-2106?
CVE-2024-2106 can allow attackers to extract sensitive information, specifically registered users' usernames and email addresses.
What versions of the MasterStudy LMS Plugin are affected by CVE-2024-2106?
CVE-2024-2106 affects all versions of the MasterStudy LMS WordPress Plugin up to and including version 3.2.10.
Is authentication required to exploit CVE-2024-2106?
No, CVE-2024-2106 allows unauthenticated attackers to exploit the vulnerability.