CVE-2026-96537

The Tutor LMS WordPress plugin, in versions before 4.1.1 , contains a vulnerability due to a missing capability check during the regeneration of managed pages. This flaw allows unauthenticated users to force-publish unpublished pages, overwrite existing content, create new pages, and modify assoc...