WP Clinic
Log in Sign up

CVE · High

CVE-2021-24184 — Tutor LMS – eLearning and online course solution [tutor] < 1.7.7

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2021-24184 Tutor LMS – eLearning and online course solution [tutor] < 1.7.7 Missing Authorization High 8.8 < 1.7.7 1.7.7 2021-03-15

CVE-2021-24184

Several AJAX endpoints in the Tutor LMS – eLearning and online course solution WordPress plugin before 1.7.7 were unprotected, allowing students to modify course information and elevate their privileges among many other actions.

Source: CVE.org

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.