CVE-2024-2409

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

The MasterStudy LMS plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.3.1. This is due to insufficient validation checks within the _register_user() function called by the 'wp_ajax_nopriv_stm_lms_register' AJAX action. This makes it possible for unauthenticated attackers to register a user with administrator-level privileges when MasterStudy LMS Pro is installed and the LMS Forms Editor add-on is enabled.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-266

Affected software

No affected versions have been published.

Timeline

Published
Mar 29, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-240919.8Yealink Meeting Server before v26.0.0.66 was discovered to contain an OS command injection vulnerability via the file upload interface.CVE-2024-240927.8SQL Injection vulnerability in Code-projects.org Scholars Tracking System 1.0 allows attackers to run arbitrary code via login.php.CVE-2024-240939.8SQL Injection vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via Personal Information UpCVE-2024-240959.8Code-projects Simple Stock System 1.0 is vulnerable to SQL Injection.CVE-2024-240967.8Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via BookSBIN.CVE-2024-240975.4Cross Site Scripting (XSS) vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via the News FCVE-2024-240987.8Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection via the News Feed.CVE-2024-240995.4Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Employment Status Information Update.CVE-2024-24109.8The JsonToBinaryStream() function is part of the protocol buffers C++ implementation and is used to parse JSON from a stream. If the input iCVE-2024-241008.3Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via PublisherID.CVE-2024-241019.8Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Eligibility Information Update.CVE-2024-241057.8SQL Injection vulnerability in Code-projects Computer Science Time Table System 1.0 allows attackers to run arbitrary code via adminFormvali