CVE-2023-3133

Published: Jul 4, 2023

Modified: Nov 21, 2024

PUBLISHED

Description

The Tutor LMS WordPress plugin before 2.2.1 does not implement adequate permission checks for REST API endpoints, allowing unauthenticated attackers to access information from Lessons that should not be publicly available.

Vendor	Product	Versions
Unknown	Tutor LMS	affected `0 - < 2.2.1`

References

https://wpscan.com/vulnerability/3b6969a7-5cbc-4e16-8f27-5dde481237f5

exploit

vdb-entry

technical-description

https://plugins.trac.wordpress.org/browser/tutor/tags/2.2.0/classes/RestAPI.php#L253

patch

https://wordpress.org/plugins/tutor/

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2023-3133

Description

Affected Products

References