Unauthenticated Payment Bypass in MasterStudy LMS WordPress Plugin

Executive Summary

This vulnerability affects the MasterStudy LMS WordPress plugin versions before 3.7.40. It allows unauthenticated users to bypass payment by exploiting the PayPal IPN system. The plugin fails to verify payment details like amount, receiver, currency, or status before marking orders as completed, letting attackers pay a token amount for full access to paid content.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check if your MasterStudy LMS WordPress plugin version is below 3.7.40. You can do this by inspecting the plugin files or using WordPress admin panel. Look for unauthorized completed orders with minimal payment amounts in your payment logs.

Useful 0 Not Useful 0

Impact Analysis

Unauthenticated attackers can pay a minimal amount to gain access to paid content without completing the full payment. This results in lost revenue for content providers and unauthorized access to restricted materials.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update the MasterStudy LMS WordPress plugin to version 3.7.40 or later. Review all recent orders for suspicious activity, especially those with unusually low payment amounts. Consider temporarily disabling the PayPal IPN feature if not essential until the update is applied.

Useful 0 Not Useful 0