Tutor LMS <3.9.13 Privilege Escalation to Auto-Approved Comment Creation with XSS

wpscan.com 2026-07-13查看中文 →

Security AdvisoryCVE-2026-12273MediumTutor LMS

Affected:

Tutor LMS < 3.9.13

Fixed in:

3.9.13

Referenced CVEs: CVE-2026-12273

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from wpscan.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

GeekyBot < 1.2.8 Unauthenticated Sensitive Information Disclosure (CVE-2026-15048) 2026-07-31 WP Go Maps < 10.1.04 Unauthenticated SQL Injection via Markers REST filter (CVE-2026-15381) 2026-07-31 JS Help Desk < 3.1.5 IDOR Leaks Cross-User Support Tickets and PII (CVE-2026-15209) 2026-07-31 WordPress Plugin Product Feed Manager < 7.6.1 Contributor+ SQL Injection (CVE-2026-15258) 2026-07-31 Demi Backup Migration Plugin Unauthenticated Sensitive Data Exposure via Public Backup Directory (CVE-2026-14333) 2026-07-31

Offline Archive

Offline screenshot & PDF are Pro-exclusive