Description
Several AJAX endpoints in the Tutor LMS – eLearning and online course solution WordPress plugin before 1.7.7 were unprotected, allowing students to modify course information and elevate their privileges among many other actions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Tutor LMS – eLearning and online course solution | 1.7.7 – < 1.7.7 | 1.7.7 |