Threats Tagged 'cve-2026-4817'

The MasterStudy LMS WordPress Plugin for Online Courses and Education contains a time-based blind SQL injection vulnerability in the /lms/stm-lms/order/items REST API endpoint. This flaw exists in versions up to and including 3. 7. 25 and arises from improper sanitization of the 'order' and 'orderby' parameters, allowing SQL injection via the ORDER BY clause. Authenticated users with subscriber-level access or higher can exploit this to extract sensitive database information such as user credentials and session tokens. The vulnerability is due to a design flaw in the plugin's custom Query builder class that concatenates unquoted SQL functions directly into queries. The CVSS score is 6. 5 (medium severity). No official patch or remediation guidance is currently available from the vendor. No known exploits in the wild have been reported.