Tutor LMS < 1.5.3 - Cross-Site Request Forgery (CSRF)

🗓️ 04 Feb 2020 00:00:00Reported by Jinson Varghese BehananType

Tutor LMS WordPress plugin vulnerable to Cross-Site Request Forgery (CSRF) attacks, enabling attackers to approve, block, or add instructor accounts using CSRF techniques

Reporter	Title	Published	Views	Family All 12
exploitpack	Wordpress Plugin Tutor LMS 1.5.3 - Cross-Site Request Forgery (Add User)	2 Mar 202000:00	–	exploitpack
Prion	Cross site request forgery (csrf)	4 Feb 202020:15	–	prion
OSV	CVE-2020-8615	4 Feb 202020:15	–	osv
0day.today	Wordpress Tutor LMS 1.5.3 Plugin - Cross-Site Request Forgery (Add User) Vulnerability	2 Mar 202000:00	–	zdt
Cvelist	CVE-2020-8615	4 Feb 202019:01	–	cvelist
Packet Storm	WordPress Tutor LMS 1.5.3 Cross Site Request Forgery	2 Mar 202000:00	–	packetstorm
Check Point Advisories	WordPress Tutor LMS Plugin Cross Site Request Forgery (CVE-2020-8615)	26 Mar 202000:00	–	checkpoint_advisories
NVD	CVE-2020-8615	4 Feb 202020:15	–	nvd
wpexploit	Tutor LMS < 1.5.3 - Cross-Site Request Forgery (CSRF)	4 Feb 202000:00	–	wpexploit
Nuclei	Wordpress Plugin Tutor LMS 1.5.3 - Cross-Site Request Forgery	17 Oct 202307:20	–	nuclei

Vulners

Node

-tutorRange<1.5.3

Source	Link
getastra	www.getastra.com/blog/911/plugin-exploit/cross-site-request-forgery-in-tutor-lms-plugin/
jinsonvarghese	www.jinsonvarghese.com/cross-site-request-forgery-in-tutor-lms/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

04 Feb 2020 00:00Current

0.5Low risk

Vulners AI Score0.5

EPSS0.05