CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to Information Exposure in versions up to, and including, 3.2.10. This can allow unauthenticated attackers to extract sensitive data including all registered user's username and email addresses which can be used to help perform future attacks.
Explanation of Vulnerability in Simple Terms
The MasterStudy LMS WordPress plugin through version 3.2.10 exposes sensitive information to unauthenticated users. An attacker can read data that should be restricted without needing to log in or interact with a site administrator. The vulnerability affects all installations running the affected versions.
What an attacker can do
Read sensitive information from the plugin without authentication.
Potential impact on your site
Confidential course or user data may be visible to anyone visiting your site.
Conditions required to exploit
Network access to the WordPress site; no login or user interaction required.
Key dates
External resources
Related vulnerabilities
