Description
WordPress Plugin Tutor LMS-eLearning and online course solution is prone to a local file inclusion vulnerability because it fails to sufficiently verify user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks. WordPress Plugin Tutor LMS-eLearning and online course solution version 1.8.7 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.8.8 or latest
References
Related Vulnerabilities
Liferay Portal Inefficient Regular Expression Complexity Vulnerability (CVE-2022-42124)
WebLogic CVE-2020-14825 Vulnerability (CVE-2020-14825)
WordPress Plugin Font Organizer Cross-Site Scripting (2.1.1)
Contao Key Management Errors Vulnerability (CVE-2019-10643)
phpMyAdmin Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-4729)