Skip to content
Sign in
9.8 Critical

CVE-2024-2411 The MasterStudy LMS plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including,…

Description

The MasterStudy LMS plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.3.0 via the 'modal' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included.

Affected products and versions

Product Affected versions Fixed in
MasterStudy LMS WordPress Plugin – for Online Courses and Education 3.3 earliest → 3.3.0 No fix stated
masterstudy_lms 3.3 earliest → 3.3.0 No fix stated

Other CVEs of MasterStudy LMS WordPress Plugin – for Online Courses and Education

The 11 CVEs of MasterStudy LMS WordPress Plugin – for Online Courses and Education →
CVE-2026-5060 The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to Insecure… 6.5 Medium CVE-2026-4817 The MasterStudy LMS WordPress Plugin for Online Courses and Education plugin for WordPress is vulnerable to Time-based… 6.5 Medium CVE-2026-0559 The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to Stored… 6.4 Medium CVE-2025-13766 The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to… 5.4 Medium
Track this CVE