CVE-2024-2106

MEDIUM 5.3

MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.10 - Basic Information Exposure via REST route

CVSS Score

5.3

EPSS Score

0.0%

EPSS Percentile

0th

The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to Information Exposure in versions up to, and including, 3.2.10. This can allow unauthenticated attackers to extract sensitive data including all registered user's username and email addresses which can be used to help perform future attacks.

CWE	CWE-200
Vendor	stylemix
Product	masterstudy lms wordpress plugin – for online courses and education
Published	Mar 13, 2024
Last Updated	Apr 8, 2026

Stay Ahead of the Next One

Get instant alerts for stylemix masterstudy lms wordpress plugin – for online courses and education

Be the first to know when new medium vulnerabilities affecting stylemix masterstudy lms wordpress plugin – for online courses and education are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

stylemix / MasterStudy LMS WordPress Plugin – for Online Courses and Education

0 ≤ 3.2.10

References

NVD ↗ CVE.org ↗ EPSS Data ↗

wordfence.com: https://www.wordfence.com/threat-intel/vulnerabilities/id/27e4d519-bc98-44d3-a519-72674184e7f2?source=cve plugins.svn.wordpress.org: https://plugins.svn.wordpress.org/masterstudy-lms-learning-management-system/tags/3.2.8/_core/lms/route.php plugins.svn.wordpress.org: https://plugins.svn.wordpress.org/masterstudy-lms-learning-management-system/tags/3.2.8/_core/lms/classes/models/StmUser.php plugins.trac.wordpress.org: https://plugins.trac.wordpress.org/changeset/3045511/masterstudy-lms-learning-management-system/tags/3.2.11/_core/lms/route.php?old=3036794&old_path=masterstudy-lms-learning-management-system/trunk/_core/lms/route.php

Credits

Hiroho Shimada