MasterStudy LMS < 3.0.18 - Unauthenticated Instructor Account Creation
Priority HIGH 72Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · High · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA.
Summary
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.0.18 does not have proper checks in place during registration allowing anyone to register on the site as an instructor. They can then add courses and/or posts.
Why it matters now
Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.06235 93rd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA and NVD
Fix Fixed MasterStudy LMS WordPress Plugin (Unknown): 3.0.18
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Unknown | MasterStudy LMS WordPress Plugin | before 3.0.18 | 3.0.18 | Patch available | CNA |
- MasterStudy LMS WordPress Plugin VendorUnknown Affected before 3.0.18 Fixed in 3.0.18 Patch available CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:stylemixthemes:masterstudy_lms:*:*:*:*:*:wordpress:*:* | before 3.0.18 | Vulnerable | StylemixThemes |
- cpe:2.3:a:stylemixthemes:masterstudy_lms:*:*:*:*:*:wordpress:*:* Versions before 3.0.18 Vulnerable ·StylemixThemes
Remediation
- Fix · CNA MasterStudy LMS WordPress Plugin (Unknown) Fixed in 3.0.18
Timeline
- 2026-10-02 Threatist record created from CVE-2023-4278
- 2026-10-03 Alias added: GHSA-522j-v5mv-h6mw
References
More StylemixThemes Masterstudy Lms vulnerabilities
- TI-2024-01413 MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.5 - Unauthenticated SQL Injection CVSS 3.1CRITICAL 9.8
- TI-2022-00364 MasterStudy LMS < 2.7.6 - Unauthenticated Admin Account Creation CVSS 3.1CRITICAL 9.8
- TI-2024-05535 MasterStudy LMS < 3.3.24 - Privilege Escalation to Instructor CVSS 3.1CRITICAL 9.1
- TI-2024-02936 MasterStudy LMS <= 3.3.3 - Unauthenticated Local File Inclusion via template CVSS 3.1CRITICAL 9.8
- TI-2024-02237 MasterStudy LMS <= 3.3.1 - Unauthenticated Privilege Escalation via stm_lms_register AJAX Action CVSS 3.1CRITICAL 9.8
- TI-2024-24623 WordPress MasterStudy LMS plugin <= 3.2.12 - Broken Access Control vulnerability CVSS 3.1CRITICAL 9.8
Sources
- CVE-2023-4278 · CVE Program
- CVE-2023-4278 · NVD
- FIRST EPSS
- GHSA-522j-v5mv-h6mw · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences