The MasterStudy LMS WordPress Plugin WordPress plugin before 3.3.24 does not prevent students from creating instructor accounts, which could be used to get access to functionalities they shouldn't have.
https://wpscan.com/vulnerability/59abfb7c-d5ea-45f2-ab9a-4391978e3805/