CVE-2024-2409

The MasterStudy LMS plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.3.1. This is due to insufficient validation checks within the _register_user() function called by the 'wp_ajax_nopriv_stm_lms_register' AJAX action. This makes it possible for unauthenticated attackers to register a user with administrator-level privileges when MasterStudy LMS Pro is installed and the LMS Forms Editor add-on is enabled.

• CWE-266

• https://docs.stylemixthemes.com/masterstudy-lms/changelog-free-version#id-3.3.2Patch, Release Notes
• https://plugins.trac.wordpress.org/changeset/3059676/masterstudy-lms-learning-management-systemPatch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/94736152-b365-4b3a-a786-ed49f7d0fc7a?source=cveThird Party Advisory
• https://docs.stylemixthemes.com/masterstudy-lms/changelog-free-version#id-3.3.2Patch, Release Notes
• https://plugins.trac.wordpress.org/changeset/3059676/masterstudy-lms-learning-management-systemPatch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/94736152-b365-4b3a-a786-ed49f7d0fc7a?source=cveThird Party Advisory

Published

Mar 29, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-24059springboot-manager v1.6 is vulnerable to Arbitrary File Uplo…5.4
• CVE-2024-2406A vulnerability, which was classified as critical, was found…9.8
• CVE-2024-24060springboot-manager v1.6 is vulnerable to Cross Site Scriptin…5.4
• CVE-2024-24061springboot-manager v1.6 is vulnerable to Cross Site Scriptin…5.4
• CVE-2024-24062springboot-manager v1.6 is vulnerable to Cross Site Scriptin…5.4
• CVE-2024-2408The openssl_private_decrypt function in PHP, when using PKCS…5.9
• CVE-2024-24091Yealink Meeting Server before v26.0.0.66 was discovered to c…9.8
• CVE-2024-24092SQL Injection vulnerability in Code-projects.org Scholars Tr…7.8
• CVE-2024-24093SQL Injection vulnerability in Code-projects Scholars Tracki…9.8
• CVE-2024-24095Code-projects Simple Stock System 1.0 is vulnerable to SQL I…9.8
• CVE-2024-24096Code-projects Computer Book Store 1.0 is vulnerable to SQL I…7.8
• CVE-2024-24097Cross Site Scripting (XSS) vulnerability in Code-projects Sc…5.4