Lucene search
+L

1 matches found

Patchstack
Patchstack
•added 2026/04/12 11:23 p.m.•18 views

WordPress Tutor LMS plugin <= 3.9.7 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Course Content Modification vulnerability

Authenticated Subscriber+ Insecure Direct Object Reference to Arbitrary Course Content Modification vulnerability discovered by Hunter Jensen skid in WordPress Plugin Tutor LMS versions = 3.9.7...

4.3CVSS5.8AI score0.00336EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder