Description
The Tutor LMS Pro plugin for WordPress is vulnerable to unauthorized access of data, modification of data, loss of data due to a missing capability check on multiple functions in all versions up to, and including, 2.7.0. This makes it possible for unauthenticated attackers to add, modify, or delete user meta and plugin options.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| themeum | Tutor LMS Pro | unaffected |
|
No data.
No data available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2024-32774 | The Tutor LMS Pro plugin for WordPress is vulnerable to unauthorized access of data, modification of data, loss of data due to a missing capability check on multiple functions in all versions up to, and including, 2.7.0. This makes it possible for unauthenticated attackers to add, modify, or delete user meta and plugin options. |
References
History
Wed, 22 Jan 2025 18:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Themeum
Themeum tutor Lms |
|
| Weaknesses | CWE-862 | |
| CPEs | cpe:2.3:a:themeum:tutor_lms:*:*:*:*:pro:wordpress:*:* | |
| Vendors & Products |
Themeum
Themeum tutor Lms |
MITRE
Status: PUBLISHED
Assigner: Wordfence
Published:
Updated: 2026-04-08T17:09:50.010Z
Reserved: 2024-04-26T00:00:13.727Z
Link: CVE-2024-4222
Vulnrichment
Updated: 2024-08-01T20:33:53.068Z
NVD
Status : Modified
Published: 2024-05-16T10:15:08.687
Modified: 2026-04-08T18:21:43.020
Link: CVE-2024-4222
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses