VYPR
← All advisories
High severity7.3NVD Advisory· Published May 16, 2024· Updated Apr 8, 2026

CVE-2024-4222

CVE-2024-4222

Description

The Tutor LMS Pro plugin for WordPress is vulnerable to unauthorized access of data, modification of data, loss of data due to a missing capability check on multiple functions in all versions up to, and including, 2.7.0. This makes it possible for unauthenticated attackers to add, modify, or delete user meta and plugin options.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Themeum/Tutor Lms2 versions
    cpe:2.3:a:themeum:tutor_lms:*:*:*:*:pro:wordpress:*:*+ 1 more
    • cpe:2.3:a:themeum:tutor_lms:*:*:*:*:pro:wordpress:*:*range: <2.7.1
    • (no CPE)range: <=2.7.0
  • WordPress/Tutor Lmswp-canonicalize

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.