CVE-2024-2411

CVE-2024-2411 is a critical Local File Inclusion vulnerability affecting all versions of the MasterStudy LMS WordPress plugin up to and including 3.3.0. This allows unauthenticated attackers to include and execute arbitrary files on the server, potentially leading to PHP code execution, bypassing access controls, or sensitive data exposure. With a CVSS score of 9.8 (Critical), it presents a severe risk due to its network-based attack vector, low complexity, and no user interaction required. While there are no known public exploits or active exploitation in the wild, the vulnerability has garnered significant community discussion with 11 mentions, indicating awareness and potential for future exploitation.