Логотип exploitDog
bind:CVE-2024-1502
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-1502

Количество 3

Количество 3

nvd логотип

CVE-2024-1502

почти 2 года назад

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the tutor_delete_announcement() function in all versions up to, and including, 2.6.1. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete arbitrary posts.

CVSS3: 5.4
EPSS: Низкий
github логотип

GHSA-3p89-8hm7-44h4

почти 2 года назад

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the tutor_delete_announcement() function in all versions up to, and including, 2.6.1. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete arbitrary posts.

CVSS3: 5.4
EPSS: Низкий
fstec логотип

BDU:2024-03356

почти 2 года назад

Уязвимость функции tutor_delete_announcement() плагина Tutor LMS системы управления содержимым сайта WordPress, позволяющая нарушителю повысить свои привилегии

CVSS3: 5.4
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2024-1502

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the tutor_delete_announcement() function in all versions up to, and including, 2.6.1. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete arbitrary posts.

CVSS3: 5.4
0%
Низкий
почти 2 года назад
github логотип
GHSA-3p89-8hm7-44h4

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the tutor_delete_announcement() function in all versions up to, and including, 2.6.1. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete arbitrary posts.

CVSS3: 5.4
0%
Низкий
почти 2 года назад
fstec логотип
BDU:2024-03356

Уязвимость функции tutor_delete_announcement() плагина Tutor LMS системы управления содержимым сайта WordPress, позволяющая нарушителю повысить свои привилегии

CVSS3: 5.4
0%
Низкий
почти 2 года назад

Уязвимостей на страницу