The Tutor LMS Pro plugin for WordPress is vulnerable to unauthorized access of data, modification of data, loss of data due to a missing capability check on the 'authenticate' function in all versions up to, and including, 2.7.0. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to gain control of an existing administrator account.
Metrics
Affected Vendors & Products
References
History
Wed, 22 Jan 2025 18:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Themeum
Themeum tutor Lms |
|
Weaknesses | CWE-862 | |
CPEs | cpe:2.3:a:themeum:tutor_lms:*:*:*:*:pro:wordpress:*:* | |
Vendors & Products |
Themeum
Themeum tutor Lms |

Status: PUBLISHED
Assigner: Wordfence
Published: 2024-05-16T09:32:11.196Z
Updated: 2024-08-01T20:40:46.463Z
Reserved: 2024-04-30T15:42:23.426Z
Link: CVE-2024-4351

Updated: 2024-08-01T20:40:46.463Z

Status : Analyzed
Published: 2024-05-16T10:15:09.890
Modified: 2025-01-22T18:23:35.573
Link: CVE-2024-4351

No data.