CVE-2023-4278

PoC —

CVSS 3.1

7.5 high

EPSS

6%p93

Published

Sep 11, 2023 (Sep 11, 2023)

Modified

Jun 17, 2026

Description

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.0.18 does not have proper checks in place during registration allowing anyone to register on the site as an instructor. They can then add courses and/or posts.

Vendors: stylemixthemes
Products: masterstudy lms
Ecosystems: WordPress
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (6.2%)

In the news0 stories

No ingested article mentions this CVE yet.