CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The Masteriyo LMS plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.1.6. This is due to the plugin allowing a user to update the user role through the 'InstructorsController::prepare_object_for_database' function. This makes it possible for authenticated attackers, with Student-level access and above, to elevate their privileges to that of an administrator.
Explanation of Vulnerability in Simple Terms
Masteriyo LMS versions up to 2.1.6 lack proper authorization checks, allowing authenticated users to perform actions they should not have permission to access. An attacker with a low-privilege account can read, modify, or delete sensitive data and functionality across the platform. This affects confidentiality, integrity, and availability of the learning management system.
What an attacker can do
Read, modify, or delete data and functionality they should not have access to.
Potential impact on your site
Any registered user can access or alter course content, student records, and system settings without proper role restrictions.
Conditions required to exploit
Attacker must have a valid low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
