CVE-2024-1904: Stylemixthemes Masterstudy Lms

Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days.

The MasterStudy LMS plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the search_posts function in all versions up to, and including, 3.2.13. This makes it possible for authenticated attackers, with subscriber-level access and above, to expose draft post titles and excerpts.

Affected products

• Stylemixthemes Masterstudy Lms: before 3.3.0 (fixed in 3.3.0)

Published 2024-04-09. Last modified 2026-06-17.