Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1110 CNY

100%
Buy Us a Coffee

CVE-2024-4351 PoC — Tutor LMS Pro <= 2.7.0 - Missing Authorization to Privilege Escalation

Source
https://github.com/ZSECURE/CVE-2024-4351
Associated Vulnerability
Title:Tutor LMS Pro <= 2.7.0 - Missing Authorization to Privilege Escalation (CVE-2024-4351)
Description:The Tutor LMS Pro plugin for WordPress is vulnerable to unauthorized access of data, modification of data, loss of data due to a missing capability check on the 'authenticate' function in all versions up to, and including, 2.7.0. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to gain control of an existing administrator account.
Readme
# CVE-2024-4351
File Snapshot

 [4.0K]  /data/pocs/4d308055f383e43b05444fba9b45b21b1b301789
├── [1.0K]  LICENSE
├── [ 590]  poc.py
└── [  15]  README.md

0 directories, 3 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →