MasterStudy LMS < 3.7.50 - Instructor+ Order Status Manipulation via IDOR
28Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 3.8epss 0.2%
exploitation probability
0.2%top 86% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not perform per-object ownership or capability checks when updating orders through its REST API, allowing users with the Instructor role to modify any order on the site, granting free course enrolment, revoking other users' paid enrolments, and tampering with order notes.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L
Affected products
Unknown · MasterStudy LMS WordPress Pluginpublic PoCs found — 1
cve_referencewpscan.com/vulnerability/8006876f-27bb-483d-b4e4-9fa4414d16f0/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.