Description
WordPress Plugin MasterStudy LMS-for Online Courses and Education is prone to a local file inclusion vulnerability because it fails to sufficiently verify user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks. WordPress Plugin MasterStudy LMS-for Online Courses and Education version 3.3.0 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 3.3.1 or latest
References
Related Vulnerabilities
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2019-3894)
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-0246)
MySQL Other Vulnerability (CVE-2006-3081)
RubyGems Deserialization of Untrusted Data Vulnerability (CVE-2017-0903)
MediaWiki Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-2032)