EUVD-2026-60807
GHSA-pjp4-q96w-x83x
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
PR:L reflects mandatory subscriber authentication; C:H captures unauthorized read access to restricted data; I:N and A:N reflect the read-only nature of the access bypass.
Primary rating from Vendor (Patchstack).
CVSS VectorVendor: Patchstack
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Lifecycle Timeline
1DescriptionCVE.org
Subscriber Broken Access Control in MasterStudy LMS <= 3.7.41 versions.
AnalysisAI
Broken Access Control in the MasterStudy LMS WordPress plugin (versions up to and including 3.7.41) permits any authenticated subscriber to bypass role-based authorization checks and access data restricted to higher-privilege roles, resulting in high confidentiality impact. The CVSS vector confirms this is network-exploitable with low complexity and no user interaction required beyond holding a subscriber-level account. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The attacker must possess a valid subscriber-level WordPress account on the target site - the CVSS PR:L metric confirms this as the required privilege level. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 6.5 score is driven by an AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N vector, reflecting a network-reachable flaw requiring only a subscriber account and no user interaction, with high confidentiality impact but no write or availability consequences. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker registers a free subscriber account on a target WordPress site running MasterStudy LMS 3.7.41, a common workflow on open-enrollment e-learning platforms. Authenticated as a subscriber, they send crafted HTTP requests to plugin endpoints that should be gated to instructor or administrator roles, bypassing the missing authorization check to retrieve sensitive records such as student data, hidden course materials, or internal configurations. … |
| Remediation | Upgrade MasterStudy LMS to a version beyond 3.7.41; the specific patched release version is not independently confirmed from available intelligence and must be verified via the Patchstack advisory at https://patchstack.com/database/wordpress/plugin/masterstudy-lms-learning-management-system/vulnerability/wordpress-masterstudy-lms-plugin-3-7-41-broken-access-control-vulnerability or the official WordPress plugin repository. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Masterstudy Lms
View allThe MasterStudy LMS WordPress Plugin - for Online Courses and Education plugin for WordPress is vulnerable to union base
The MasterStudy LMS plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.3
The MasterStudy LMS WordPress plugin before 2.7.6 does to validate some parameters given when registering a new account,
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.3.24 does not prevent students from creating instructor a
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.0.18 does not have proper checks in place during registra
The MasterStudy LMS plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.3
The MasterStudy LMS plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.3
Missing Authorization vulnerability in StylemixThemes MasterStudy LMS allows Exploiting Incorrectly Configured Access Co
Unauthenticated arbitrary file deletion in the MasterStudy LMS WordPress plugin (versions ≤ 3.7.42) allows remote, unaut
SQL injection in the MasterStudy LMS WordPress plugin (versions 3.7.25 and earlier) allows authenticated users at the Su
Stored Cross-Site Scripting in the MasterStudy LMS WordPress plugin (versions <= 3.7.27) allows authenticated subscriber
Broken Access Control vulnerability in StylemixThemes MasterStudy LMS WordPress Plugin - for Online Courses and Educatio
Same weakness CWE-862 – Missing Authorization
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today