CVE-2026-85572

The Tutor LMS WordPress plugin, in versions 4.0.0 through 4.0.7 , contains a vulnerability where it fails to verify if a user has authorized access to a course before returning its lesson discussion content . This flaw allows any authenticated user , such as a subscriber, to read comments from co...