MasterStudy LMS WordPress plugin - Privilege Escalation (CVE-2022-0441)

CVE-2022-0441 is a critical privilege escalation vulnerability in the MasterStudy LMS WordPress plugin prior to version 2.7.6, where improper validation during account registration allows unauthenticated users to create admin accounts. This flaw could enable attackers to gain full administrative control over affected WordPress sites, leading to potential site takeover and further exploitation.

CrowdSec has been tracking this vulnerability and its exploits since 11th of February 2026.

CrowdSec has not observed any significant exploitation activity targeting CVE-2022-0441 across its network. As a result, no community-driven trend analysis is available for this vulnerability at this time.

Attackers exploit the /wp-admin/admin-ajax.php endpoint with the action=stm_lms_register parameter to register new accounts with elevated administrator privileges by manipulating the profile_default_fields_for_register field.