CVE-2026-14310

The Tutor LMS WordPress plugin, in versions before 4.0.0 , contains an authorization bypass vulnerability. The plugin fails to properly verify if a user has access to a specific course before allowing them to read or write to a Q&A thread associated with that course. This flaw allows authenticate...

CVE-2024-3942

The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability check on several functions in versions up to, and including, 3.3.8. This makes it possible for authenticate...

CVE-2024-3942

The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability check on several functions in versions up to, and including, 3.3.8. This makes it possible for authenticate...

PT-2024-16914 · WordPress · The Tutor Lms

Name of the Vulnerable Software and Affected Versions: The Tutor LMS – eLearning and online course solution plugin for WordPress versions up to, and including, 2.6.0 Description: The issue allows authenticated attackers with subscriber access or higher to interact with questions in courses they a...