CVE-2026-14310

The Tutor LMS WordPress plugin, in versions before 4.0.0 , contains an authorization bypass vulnerability. The plugin fails to properly verify if a user has access to a specific course before allowing them to read or write to a Q&A thread associated with that course. This flaw allows authenticate...