Vendor
The Masterstudy Education WordPress Theme is vulnerable to privilege escalation in versions 4.8.151 and below due to missing authorization and nonce validation, allowing authenticated subscribers to elevate their privileges to administrator.