説明
The Tutor LMS Pro plugin for WordPress is vulnerable to unauthorized access of data, modification of data, loss of data due to a missing capability check on the 'authenticate' function in all versions up to, and including, 2.7.0. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to gain control of an existing administrator account.
AI分析AIによる分析
影響を受ける製品
themeumtutor_lms
参照
- https://www.themeum.com/product/tutor-lms/Product
- https://www.wordfence.com/threat-intel/vulnerabilities/id/59859583-49e5-4a80-8659-b9ca7ddc089d?source=cveThird Party Advisory
- https://www.themeum.com/product/tutor-lms/Product
- https://www.wordfence.com/threat-intel/vulnerabilities/id/59859583-49e5-4a80-8659-b9ca7ddc089d?source=cveThird Party Advisory