CVE-2024-3942
First published: Thu May 02 2024(Updated: )
The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability check on several functions in versions up to, and including, 3.3.8. This makes it possible for authenticated attackers, with subscriber level permissions and above, to read and modify content such as course questions, post titles, and taxonomies.
Credit: security@wordfence.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| MasterStudy LMS WordPress Plugin | <3.3.9 | |
| MasterStudy LMS | <=3.3.8 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-3942?
CVE-2024-3942 is considered a medium severity vulnerability due to the potential unauthorized access and data modification it allows.
How do I fix CVE-2024-3942?
To fix CVE-2024-3942, update the MasterStudy LMS WordPress Plugin to version 3.3.9 or later.
What are the risks associated with CVE-2024-3942?
The risks associated with CVE-2024-3942 include unauthorized access and modification of data, posing a threat to user privacy and data integrity.
Who is affected by CVE-2024-3942?
Users of the MasterStudy LMS WordPress Plugin versions up to 3.3.8 are affected by CVE-2024-3942.
Is CVE-2024-3942 exploitable remotely?
Yes, CVE-2024-3942 is exploitable remotely, requiring only authenticated access to impact the affected systems.
- agent/weakness
- agent/references
- agent/description
- agent/type
- agent/first-publish-date
- agent/author
- agent/event
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/mitre-cve
- source/MITRE
- agent/source
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/severity
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup-request
- vendor/stylemixthemes
- canonical/masterstudy lms wordpress plugin
- vendor/masterstudy
- canonical/masterstudy lms