High severity8.8NVD Advisory· Published May 16, 2024· Updated Apr 8, 2026
CVE-2024-4351
CVE-2024-4351
Description
The Tutor LMS Pro plugin for WordPress is vulnerable to unauthorized access of data, modification of data, loss of data due to a missing capability check on the 'authenticate' function in all versions up to, and including, 2.7.0. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to gain control of an existing administrator account.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
2- www.wordfence.com/threat-intel/vulnerabilities/id/59859583-49e5-4a80-8659-b9ca7ddc089dnvdThird Party Advisory
- www.themeum.com/product/tutor-lms/nvdProduct
News mentions
0No linked articles in our index yet.