WP Clinic
Log in Sign up

CVE · Low

CVE-2021-24242 — Tutor LMS – eLearning and online course solution [tutor] < 1.8.8

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2021-24242 Tutor LMS – eLearning and online course solution [tutor] < 1.8.8 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Low 3.8 < 1.8.8 1.8.8 2021-04-05

CVE-2021-24242

The Tutor LMS – eLearning and online course solution WordPress plugin before 1.8.8 is affected by a local file inclusion vulnerability through the maliciously constructed sub_page parameter of the plugin's Tools, allowing high privilege users to include any local php file

Source: CVE.org

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.