CVE-2024-2106 MEDIUM

CVE-2024-2106: MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.10 - Basic Information Exposure via REST route

Vendor Stylemix
Product MasterStudy LMS WordPress Plugin – for Online Courses and Education
Weakness CWE-200 · Info exposure
Published March 13, 2024
Last update April 8, 2026
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to Information Exposure in versions up to, and including, 3.2.10. This can allow unauthenticated attackers to extract sensitive data including all registered user's username and email addresses which can be used to help perform future attacks.

Key dates

02Disclosure timeline

March 13, 2024 CVE published
April 8, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-10365 The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.0.3 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates CVE-2024-53243 Information Disclosure in Mobile Alert Responses in Splunk Secure Gateway CVE-2021-39089 IBM Cloud Pak for Security information disclosure CVE-2023-50290 Apache Solr: Host environment variables are published via the Metrics API CVE-2021-32720 List of order ids, number, items total and token value exposed for unauthorized uses via new API