CyberRota Analysis
AI-GeneratedThe MasterStudy LMS WordPress Plugin prior to version 3.7.46 is vulnerable due to inadequate verification of ownership for curriculum objects, enabling authenticated users with the instructor role to delete or modify sections and materials of courses owned by other instructors. This flaw poses a risk of unauthorized content manipulation within educational platforms. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate potential abuse.
Original NVD Description
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not properly verify ownership of a curriculum object before acting on it, allowing authenticated users with the instructor role to delete or modify curriculum sections and materials belonging to courses owned by other instructors.