WP Clinic
Log in Sign up

CVE · Medium

CVE-2020-8615 — Tutor LMS – eLearning and online course solution [tutor] < 1.5.3

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2020-8615 Tutor LMS – eLearning and online course solution [tutor] < 1.5.3 Cross-Site Request Forgery (CSRF) Medium 6.5 < 1.5.3 1.5.3 2020-02-04

CVE-2020-8615

A CSRF vulnerability in the Tutor LMS plugin before 1.5.3 for WordPress can result in an attacker approving themselves as an instructor and performing other malicious actions (such as blocking legitimate instructors).

Source: CVE.org

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.