2 matches found
EUVD-2025-35913
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check while verifying webhook signatures on the "verifyAndCreateOrderData" function in all versions up to, and including, 3.8.3. This makes it...
5.3CVSS5AI score0.00295EPSS
SaveExploits0References3
CVE-2025-11564: Missing Authorization
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check while verifying webhook signatures on the "verifyAndCreateOrderData" function in all versions up to, and including, 3.8.3. This makes it...
5.3CVSS5.8AI score0.00295EPSS
SaveExploits0References3
20