CVE-2024-3942

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability check on several functions in versions up to, and including, 3.3.8. This makes it possible for authenticated attackers, with subscriber level permissions and above, to read and modify content such as course questions, post titles, and taxonomies.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-862

Affected software

No affected versions have been published.

Timeline

Published: May 2, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-394207.0Acrobat Reader versions 20.005.30636, 24.002.21005, 24.001.30159, 20.005.30655, 24.002.20965, 24.002.20964, 24.001.30123, 24.003.20054 and e CVE-2024-394227.8Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Use After Free vulnerability th CVE-2024-394237.8Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by an out-of-bounds write vulnerabil CVE-2024-394247.8Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Use After Free vulnerability th CVE-2024-394257.0Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Time-of-check Time-of-use (TOCT CVE-2024-394267.8Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by an out-of-bounds read vulnerabili CVE-2024-394274.4In trusty service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with Sy CVE-2024-394284.4In trusty service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with Sy CVE-2024-394296.2In faceid servive, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no CVE-2024-39434.3The WP To Do plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.0. This is due to mi CVE-2024-394306.2In faceid servive, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no CVE-2024-394314.5In UMTS RLC driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with