CVE-2023-35093

Name of the Vulnerable Software and Affected Versions StylemixThemes MasterStudy LMS WordPress Plugin versions <= 3.0.8

Description The issue allows any logged-in users, such as subscribers, to view the "Orders" of the plugin and access data related to the order, including email, username, and more.

Recommendations For versions <= 3.0.8, update to a version greater than 3.0.8 to resolve the issue. As a temporary workaround, consider restricting access to the "Orders" section of the plugin to minimize the risk of exploitation.