4026 matches found
CVE-2026-19093
The Tutor LMS WordPress plugin before 4.0.6 does not validate a stored file path before using it to stream media, allowing users with the instructor role to read arbitrary files on the server, including files outside the web root. The readable files include the WordPress configuration file, which...
CVE-2026-14187
The Tutor LMS WordPress plugin before 4.0.6 does not enforce per-object ownership checks on its course content type, allowing any user with the instructor role to read the content of private courses belonging to other instructors...
CVE-2026-19093 Tutor LMS < 4.0.6 - Instructor+ Arbitrary File Read via Video Path
The Tutor LMS WordPress plugin before 4.0.6 does not validate a stored file path before using it to stream media, allowing users with the instructor role to read arbitrary files on the server, including files outside the web root. The readable files include the WordPress configuration file, which...
EUVD-2026-64220
The Tutor LMS WordPress plugin before 4.0.6 does not validate a stored file path before using it to stream media, allowing users with the instructor role to read arbitrary files on the server, including files outside the web root. The readable files include the WordPress configuration file, which...
CVE-2026-19093
The Tutor LMS WordPress plugin before 4.0.6 does not validate a stored file path before using it to stream media. Users with the instructor role can exploit this to read arbitrary files on the server, including files outside the web root. Critically, the WordPress configuration file (wp-config.ph...
EUVD-2026-64215
The Tutor LMS WordPress plugin before 4.0.6 does not enforce per-object ownership checks on its course content type, allowing any user with the instructor role to read the content of private courses belonging to other instructors...
CVE-2026-14187 Tutor LMS < 4.0.6 - Instructor+ Cross-Instructor Private Course Disclosure via IDOR
The Tutor LMS WordPress plugin before 4.0.6 does not enforce per-object ownership checks on its course content type, allowing any user with the instructor role to read the content of private courses belonging to other instructors...
CVE-2026-14187
Tutor LMS WordPress plugin versions prior to 4.0.6 are affected by an Insecure Direct Object Reference (IDOR) vulnerability. The plugin fails to enforce per-object ownership checks on its course content type, allowing any authenticated user with the instructor role to read the content of private ...
CVE-2026-73996
Unauthenticated Arbitrary File Upload in Masteriyo - LMS = 2.3.2 versions...
CVE-2026-73404
Subscriber Broken Access Control in MasterStudy LMS = 3.7.41 versions...
CVE-2026-68568
Subscriber Privilege Escalation in MasterStudy LMS = 3.7.41 versions...
CVE-2026-73996 WordPress Masteriyo - LMS plugin <= 2.3.2 - Arbitrary File Upload vulnerability
Unauthenticated Arbitrary File Upload in Masteriyo - LMS = 2.3.2 versions...
CVE-2026-73996
The Masteriyo LMS WordPress plugin (≤2.3.2) allows unauthenticated arbitrary file uploads, enabling remote code execution on affected sites. Patchstack rates it Critical (CVSS 9.8). No patch version or exploitation evidence is provided in the documents.
CVE-2026-73404 WordPress MasterStudy LMS plugin <= 3.7.41 - Broken Access Control vulnerability
Subscriber Broken Access Control in MasterStudy LMS = 3.7.41 versions...
CVE-2026-73404
Subscriber users of MasterStudy LMS plugin
EUVD-2026-60807
Subscriber Broken Access Control in MasterStudy LMS = 3.7.41 versions...
CVE-2026-73404
Subscriber Broken Access Control in MasterStudy LMS = 3.7.41 versions...
CVE-2026-68568
Subscriber Privilege Escalation in MasterStudy LMS = 3.7.41 versions...