2 matches found
CVE-2023-3133
The Tutor LMS WordPress plugin before 2.2.1 does not implement adequate permission checks for REST API endpoints, allowing unauthenticated attackers to access information from Lessons that should not be publicly available...
7.5CVSS7.5AI score0.00984EPSS
SaveExploits2References3
Design/Logic Flaw
The Tutor LMS WordPress plugin before 2.2.1 does not implement adequate permission checks for REST API endpoints, allowing unauthenticated attackers to access information from Lessons that should not be publicly available...
5CVSS7.4AI score0.00984EPSS
SaveExploits2References3Affected Software1
20