Lucene search
+L

2 matches found

CNNVD
CNNVD
•added 2025/10/26 12:00 a.m.•19 views

WordPress plugin Tutor LMS Pro 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.4CVSS6.4AI score0.00178EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/25 12:00 a.m.•3 views

CVE-2025-6639: Improper Authorization

The Tutor LMS Pro – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.8.3 due to missing validation on a user controlled key when viewing and editing assignments through the tutorassignmentsubmit...

5.4CVSS5.7AI score0.00178EPSS
SaveExploits0References1
Rows per page
Query Builder