Lucene search
+L

1 matches found

Packet Storm
Packet Storm
added 2026/04/10 12:0 a.m.180 views

📄 WordPress Tutor LMS 3.9.5 Insecure Direct Object Reference

WordPress Tutor LMS plugin versions 3.9.5 and below suffer from broken access control and insecure direct object reference vulnerabilities. CVE-2026-1375: Authenticated IDOR / Broken Access Control in Tutor LMS Plugin Disclaimer: This repository is created for educational purposes and ethical...

8.1CVSS5.8AI score0.00345EPSS
SaveExploits1
Rows per page
Query Builder