CVE-2024-10400 — AI Deep Analysis Summary

🚨 **Essence**: SQL Injection (SQLi) in Tutor LMS plugin. 💥 **Consequences**: Attackers can extract sensitive data from the database. The core issue is insufficient escaping of user input.

🛡️ **Root Cause**: CWE-89 (SQL Injection). 🐛 **Flaw**: The 'rating_filter' parameter lacks proper escaping and SQL query preparation. User-supplied data is not sanitized correctly before execution.

📦 **Affected**: WordPress Plugin: **Tutor LMS**. 📉 **Versions**: All versions **up to and including 2.7.6** (<= 2.7.6). Vendor: Themeum.

🕵️ **Hackers' Power**: Unauthenticated access. 📂 **Data Risk**: Extract sensitive information from the database. They can append malicious SQL queries to existing ones.

🔓 **Threshold**: LOW. 🚫 **Auth Required**: None (Unauthenticated). 🌐 **Access**: Network (AV:N). Simple to exploit without login credentials.

💻 **Public Exp?**: YES. 📂 **PoC Available**: GitHub repos exist (e.g., k0ns0l/CVE-2024-10400). Nuclei templates are also available for scanning.

🔍 **Self-Check**: Scan for Tutor LMS plugin version <= 2.7.6. 🧪 **Test**: Check if the 'rating_filter' parameter is vulnerable to SQL injection via automated scanners like Nuclei.

🩹 **Fix Status**: Yes, patched. 📢 **Update**: Upgrade to a version **newer than 2.7.6**. Check the WordPress plugin repository for the latest secure version.

🚧 **No Patch?**: Input validation is critical. 🛑 **Mitigation**: Restrict access to the 'rating_filter' endpoint if possible. Use WAF rules to block SQLi patterns in that parameter.

⚡ **Urgency**: HIGH. 🚨 **Priority**: Immediate patching required. CVSS Score indicates High Confidentiality impact. Unauthenticated exploitation makes it critical.