Tutor Lms Migration Tool Vulnerabilities

[en] The Tutor LMS – Migration Tool plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the tutor_lp_export_xml function in all versions up to, and including, 2.2.0. This makes it possible for unauthenticated attackers to export courses, including private and password...

Affected:

up to 2.2.2

Fix:

No patched version reported

Disclosed:

Jul 27, 2024

CVE-2024-1798 on NVD →

[en] The Tutor LMS – Migration Tool plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the tutor_import_from_xml function in all versions up to, and including, 2.2.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to...

Affected:

up to 2.2.2

Fix:

No patched version reported

Disclosed:

Jul 27, 2024

CVE-2024-1804 on NVD →

The Tutor LMS – Migration Tool plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the tutor_lp_export_xml function in all versions up to, and including, 2.2.0. This makes it possible for unauthenticated attackers to export courses, including private and password prote...

CVSS:

5.3

Affected:

up to 2.2.0

Fixed in:

2.2.1

Disclosed:

Jul 26, 2024

CVE-2024-1798 on NVD →

The Tutor LMS – Migration Tool plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the tutor_import_from_xml function in all versions up to, and including, 2.2.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to impor...

CVSS:

4.3

Affected:

up to 2.2.0

Fixed in:

2.2.1

Disclosed:

Jul 26, 2024

CVE-2024-1804 on NVD →