📄 WordPress Tutor LMS 3.9.5 Insecure Direct Object Reference

WordPress Tutor LMS plugin versions 3.9.5 and below suffer from broken access control and insecure direct object reference vulnerabilities. CVE-2026-1375: Authenticated IDOR / Broken Access Control in Tutor LMS Plugin Disclaimer: This repository is created for educational purposes and ethical...

WordPress LearnPress plugin <= 4.2.6.3 - Authenticated(LP Instructor+) Stored Cross-Site Scripting vulnerability

AuthenticatedLP Instructor+ Stored Cross-Site Scripting vulnerability discovered by drop in WordPress Plugin LearnPress versions = 4.2.6.3...

PT-2023-23952 · Autolab · Autolab

Name of the Vulnerable Software and Affected Versions: Autolab versions prior to 2.11.0 Description: A Tar slip vulnerability was found in the Install assessment functionality of Autolab, a course management service for auto-graded programming assignments. To exploit this issue, an authenticated...