CVE-2026-19093: Files or Directories Accessible to External Parties

The Tutor LMS WordPress plugin before 4.0.6 does not validate a stored file path before using it to stream media, allowing users with the instructor role to read arbitrary files on the server, including files outside the web root. The readable files include the WordPress configuration file, which...

CVE-2026-64966 Path Traversal leading to Remote Code Execution in ATutor

ATutor is vulnerable to a Path Traversal vulnerability in ZIP extraction functionality. An attacker with instructor privileges can upload and extract a specially crafted ZIP archive, causing files to be written outside the intended extraction directory. This allows an attacker to place a...

EUVD-2026-63367

ATutor is vulnerable to a Path Traversal vulnerability in ZIP extraction functionality. An attacker with instructor privileges can upload and extract a specially crafted ZIP archive, causing files to be written outside the intended extraction directory. This allows an attacker to place a...

CVE-2026-64966 Path Traversal leading to Remote Code Execution in ATutor

ATutor is vulnerable to a Path Traversal vulnerability in ZIP extraction functionality. An attacker with instructor privileges can upload and extract a specially crafted ZIP archive, causing files to be written outside the intended extraction directory. This allows an attacker to place a...

CVE-2026-64966 Path Traversal leading to Remote Code Execution in ATutor

ATutor is vulnerable to a Path Traversal vulnerability in ZIP extraction functionality. An attacker with instructor privileges can upload and extract a specially crafted ZIP archive, causing files to be written outside the intended extraction directory. This allows an attacker to place a...

CVE-2026-64966

ATutor (a learning management system) is affected by a Path Traversal vulnerability in its ZIP extraction functionality. An attacker with instructor privileges can upload a specially crafted ZIP archive that writes files outside the intended extraction directory, enabling placement of a server-ex...

WordPress LearnPress plugin < 4.4.4 - Instructor+ Server-Side Request Forgery via openai_apply_image_feature vulnerability

Instructor+ Server-Side Request Forgery via openaiapplyimagefeature vulnerability discovered by Meher Sudhakar Abbireddi in WordPress Plugin LearnPress versions 4.4.4...

WordPress Masteriyo LMS plugin < 2.3.3 - Instructor+ Stored XSS via Quiz Description vulnerability

Instructor+ Stored XSS via Quiz Description vulnerability discovered by Farid Narimanov in WordPress Plugin Masteriyo - LMS versions 2.3.3...

PT-2026-79014

ATutor is vulnerable to a Path Traversal vulnerability in ZIP extraction functionality. An attacker with instructor privileges can upload and extract a specially crafted ZIP archive, causing files to be written outside the intended extraction directory. This allows an attacker to place a...

PT-2026-79506

Name of the Vulnerable Software and Affected Versions Tutor LMS versions prior to 4.0.6 Description The plugin fails to enforce per-object ownership checks on its course content type. This allows users with the instructor role to access and read the content of private courses created by other...

CVE-2026-19712

The Masteriyo LMS WordPress plugin before 2.3.3 does not sanitise and escape a quiz field before outputting it back in a page, and grants its instructor role the ability to store unfiltered HTML, allowing such users to perform Stored Cross-Site Scripting attacks against any visitor of the affecte...

CVE-2026-19712 Masteriyo LMS < 2.3.3 - Instructor+ Stored XSS via Quiz Description

The Masteriyo LMS WordPress plugin before 2.3.3 does not sanitise and escape a quiz field before outputting it back in a page, and grants its instructor role the ability to store unfiltered HTML, allowing such users to perform Stored Cross-Site Scripting attacks against any visitor of the affecte...

CVE-2026-19712

The Masteriyo LMS WordPress plugin before 2.3.3 does not sanitise and escape a quiz field before outputting it back in a page, and grants its instructor role the ability to store unfiltered HTML, allowing such users to perform Stored Cross-Site Scripting attacks against any visitor of the affecte...

CVE-2026-19712

The Masteriyo LMS WordPress plugin (versions before 2.3.3 ) is vulnerable to Stored Cross-Site Scripting (XSS) because it fails to sanitize and escape a quiz field before outputting it back to a page. The plugin grants users with the instructor role the ability to store unfiltered HTML, which can...

CVE-2026-19712 Masteriyo LMS < 2.3.3 - Instructor+ Stored XSS via Quiz Description

The Masteriyo LMS WordPress plugin before 2.3.3 does not sanitise and escape a quiz field before outputting it back in a page, and grants its instructor role the ability to store unfiltered HTML, allowing such users to perform Stored Cross-Site Scripting attacks against any visitor of the affecte...

EUVD-2026-59915

The Masteriyo LMS WordPress plugin before 2.3.3 does not sanitise and escape a quiz field before outputting it back in a page, and grants its instructor role the ability to store unfiltered HTML, allowing such users to perform Stored Cross-Site Scripting attacks against any visitor of the affecte...

CVE-2026-19712: Improper Neutralization of Input During Web Page Generation

The Masteriyo LMS WordPress plugin before 2.3.3 does not sanitise and escape a quiz field before outputting it back in a page, and grants its instructor role the ability to store unfiltered HTML, allowing such users to perform Stored Cross-Site Scripting attacks against any visitor of the affecte...

PT-2026-73123

Name of the Vulnerable Software and Affected Versions Masteriyo LMS versions prior to 2.3.3 Description The plugin fails to sanitize and escape a quiz field before outputting it on a page. This allows users with the instructor role to store unfiltered HTML, enabling Stored Cross-Site Scripting XS...

CVE-2026-12971

The LearnPress WordPress plugin before 4.4.4 does not validate a user-supplied URL before the server fetches it, allowing users with the instructor role to induce the server to issue requests to arbitrary external hosts, a blind and bounded server-side request forgery...

EUVD-2026-55024

The LearnPress WordPress plugin before 4.4.4 does not validate a user-supplied URL before the server fetches it, allowing users with the instructor role to induce the server to issue requests to arbitrary external hosts, a blind and bounded server-side request forgery...