Lucene search
+L

CVE-2024-3553 Tutor LMS <= 2.6.2 - Missing Authorization to Unauthenticated Limited Options Update

🗓️ 02 May 2024 16:52:53Reported by WordfenceType 
cvelist
 cvelist
🔗 www.cve.org👁 59 Views

The Tutor LMS WordPress plugin allows unauthorized data modification

Related
Affected
Refs
ReporterTitlePublishedViews
Family
githubexploit
GithubExploit
Exploit for Missing Authorization in Themeum Tutor_Lms
26 Dec 202515:22
–githubexploit
bdu_fstec
BDU FSTEC
Tutor LMS Plugin Access Disclosure
30 Apr 202400:00
–bdu_fstec
circl
Circl
CVE-2024-3553
26 Dec 202521:00
–circl
cnnvd
CNNVD
WordPress plugin Tutor LMS has a security vulnerability
2 May 202400:00
–cnnvd
cve
CVE
CVE-2024-3553
2 May 202416:52
–cve
euvd
EUVD
EUVD-2024-32139
3 Oct 202520:07
–euvd
kitploit
Kitploit
CVE-2024-3553
28 Oct 202604:31
–kitploit
nvd
NVD
CVE-2024-3553
2 May 202417:15
–nvd
osv_cve
osv_cve
CVE-2024-3553
2 May 202417:15
–osv_cve
packetstorm
Packet Storm
📄 Tutor LMS 2.6.2 Missing Authorization / Privilege Escalation
10 Mar 202600:00
–packetstorm
Rows per page
[
  {
    "vendor": "themeum",
    "product": "Tutor LMS – eLearning and online course solution",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "2.6.2",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation