CyberRota Analysis
AI-GeneratedThe MasterStudy LMS WordPress Plugin prior to version 3.7.50 is vulnerable as it fails to verify user ownership of courses, enabling instructors to access and disclose the names and email addresses of students enrolled in other instructors' courses. This could lead to unauthorized exposure of sensitive student information. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate potential data privacy risks.
Original NVD Description
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not verify that the requesting user owns the course before returning its enrolled-student data, allowing users with the MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50's Instructor role to disclose the names and email addresses of students enrolled in other instructors' courses.