CVE-2023-35093

CVSS V2 None CVSS V3 None
Description
Broken Access Control vulnerability in StylemixThemes MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin <= 3.0.8 versions allows any logged-in users, such as subscribers to view the "Orders" of the plugin and get the data related to the order like email, username, and more.
Overview
  • CVE ID
  • CVE-2023-35093
  • Assigner
  • Patchstack
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2023-06-22T11:07:21.020Z
  • Last Modified Date
  • 2023-06-22T11:07:21.020Z
Weakness Enumerations
CWE URL
CWE-862 http://cwe.mitre.org/data/definitions/862.html
References
Reference URL Reference Tags
https://patchstack.com/database/vulnerability/masterstudy-lms-learning-management-system/wordpress-masterstudy-lms-plugin-3-0-7-broken-access-control-vulnerability?_s_id=cve vdb-entry
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-35093
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35093
History
Created Old Value New Value Data Type Notes
2024-06-25 19:26:24 Added to TrackCVE