CVE-2022-0441

Description

The MasterStudy LMS WordPress plugin before 2.7.6 does to validate some parameters given when registering a new account, allowing unauthenticated users to register as an admin

References

https://github.com/DappaNISM/CVE-2022-0441

https://github.com/kyukazamiqq/CVE-2022-0441

https://github.com/SDragon1205/cve-2022-0441

https://wpscan.com/vulnerability/173c2efe-ee9c-4539-852f-c242b4f728ed

https://plugins.trac.wordpress.org/changeset/2667195

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-15580

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS