MasterStudy - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/vendors/masterstudy/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 12 Nov 2026 14:15:14 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgMasterstudy Education WordPress Theme: Privilege Escalation (CVE-2026-13764)https://feed.craftedsignal.io/briefs/2026-11-masterstudy-privilege-escalation-cve-2026-13764/Thu, 12 Nov 2026 14:15:14 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-masterstudy-privilege-escalation-cve-2026-13764/The Masterstudy Education WordPress Theme is vulnerable to privilege escalation in versions 4.8.151 and below due to missing authorization and nonce validation, allowing authenticated subscribers to elevate their privileges to administrator.The Masterstudy - Education WordPress Theme for WordPress is vulnerable to privilege escalation in all versions up to and including 4.8.151. The issue stems from missing authorization and nonce validation on the masterstudy_ms_stm_set_discard_transient AJAX action. An authenticated attacker with Subscriber-level access or higher can exploit this to set the stm_developer_access_token transient. By leveraging the developer access auto-login flow, the attacker can obtain administrative session cookies.

Impact

Successful exploitation allows an authenticated attacker to elevate their privileges to Administrator, granting full control over the WordPress instance.

Recommendation

Update the Masterstudy - Education WordPress Theme to a version newer than 4.8.151 immediately. If an update is unavailable, disable the theme or restrict access to the affected AJAX endpoint.

]]>highadvisorycve-2026-13764privilege-escalationwordpress