CVE-2026-19094 Tutor LMS < 4.0.6 - Unauthenticated SQLi via 'offset' and 'item_per_page' Parameters

The Tutor LMS WordPress plugin before 4.0.6 does not validate values used to build a database query, and does not restrict which template file a request may load, allowing unauthenticated users to inject SQL and to read question and answer content belonging to courses that are not publicly...

CVE-2026-19094

The Tutor LMS WordPress plugin (versions

EUVD-2026-66273

The Tutor LMS WordPress plugin before 4.0.6 does not validate values used to build a database query, and does not restrict which template file a request may load, allowing unauthenticated users to inject SQL and to read question and answer content belonging to courses that are not publicly...

chamilo-lms-unauthenticated-big-upload-rce-poc

Chamilo LMS - PoC per RCE tramite Big Upload File non autenticato Questo è uno script scritto in Python che consente lo sfruttamento della falla di sicurezza del software Chamilo LMS descritta in CVE-2023-4220. Il sistema è vulnerabile nelle versioni precedenti la 1.11.24. Utilizzo Clona il...

CVE-2023-4226

🛠️ Exploit CVE-2023-4226 für Chamilo LMS 📋 Beschreibung Python-Skript, das die Ausnutzung von CVE-2023-4226 automatisiert, einer Schwachstelle zum Hochladen von Dateien ohne Einschränkungen in Chamilo LMS = v1.11.24. Es lädt eine PHP-Webshell basierend auf PentesterMonkey hoch und konfiguriert...

chamilo-lms-unauthenticated-rce-poc

Chamilo LMS RCE non autenticata PoC Questo è uno script scritto in Python che consente lo sfruttamento della falla di sicurezza del software Chamilo LMS descritta in CVE-2023-4220. Il sistema è vulnerabile nelle versioni precedenti alla 1.11.24. Utilizzo Clona il repository sulla tua macchina e...

CVE-2023-4220-RCE

CVE-2023-4220-RCE Sommario Avviso di Starlabs Prodotto interessato: Chamilo , -p --port REMOTE PORT -c --comand Flag per la reverse shell -lh/--localhost: IP dell'attaccante -lp/--localtcat porta listener...

CVE-2026-10630

The WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.2.29 via the 'resultID' parameter due to missing validation on a user controlled key...

CVE-2026-10630

WP Courses LMS (WordPress plugin) is vulnerable to Insecure Direct Object Reference (IDOR) in all versions up to and including 3.2.29 . The resultID parameter in the wpcq_get_quiz_result AJAX action lacks proper ownership validation, allowing authenticated users with custom-level access or above ...

CVE-2026-10630 WP Courses LMS <= 3.2.29 - Insecure Direct Object Reference to Authenticated (Custom+) Sensitive Information Disclosure via 'resultID' Parameter

The WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.2.29 via the 'resultID' parameter due to missing validation on a user controlled key...

WordPress WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses plugin <= 3.2.29 - Insecure Direct Object Reference to Authenticated (Custom+) Sensitive Information Disclosure vulnerability

Insecure Direct Object Reference to Authenticated Custom+ Sensitive Information Disclosure vulnerability discovered by Vapour in WordPress Plugin WP Courses LMS versions = 3.2.29...

EUVD-2026-65192

The WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.2.29 via the 'resultID' parameter due to missing validation on a user controlled key...

EUVD-2026-65159

Unauthenticated Arbitrary File Deletion in MasterStudy LMS = 3.7.42 versions...

CVE-2026-78284

Unauthenticated Arbitrary File Deletion in MasterStudy LMS = 3.7.42 versions...

CVE-2026-78284 WordPress MasterStudy LMS plugin <= 3.7.42 - Arbitrary File Deletion vulnerability

Unauthenticated Arbitrary File Deletion in MasterStudy LMS = 3.7.42 versions...

CVE-2026-78284

CVE-2026-78284 is an unauthenticated arbitrary file deletion vulnerability in the MasterStudy LMS WordPress plugin, affecting versions 3.7.42 and earlier . An attacker can delete files on the server without any authentication or user interaction. The CVSS 3.1 base score is 8.6 (HIGH) , driven by ...

ChamiloLMS-CVE-2023-4220

Exploit ChamiloLMS CVE-2023-4220 Exploit Python per CVE-2023-4220 , una vulnerabilità di upload arbitrario di file non autenticato che interessa Chamilo LMS = 1.11.24. La vulnerabilità si trova nel componente BigUpload di Chamilo. Sulle installazioni vulnerabili, il gestore di upload permette di...

CVE-2026-19093

The Tutor LMS WordPress plugin before 4.0.6 does not validate a stored file path before using it to stream media, allowing users with the instructor role to read arbitrary files on the server, including files outside the web root. The readable files include the WordPress configuration file, which...

CVE-2026-14187

The Tutor LMS WordPress plugin before 4.0.6 does not enforce per-object ownership checks on its course content type, allowing any user with the instructor role to read the content of private courses belonging to other instructors...

EUVD-2026-64220

The Tutor LMS WordPress plugin before 4.0.6 does not validate a stored file path before using it to stream media, allowing users with the instructor role to read arbitrary files on the server, including files outside the web root. The readable files include the WordPress configuration file, which...