Description
WordPress Plugin Tutor LMS-eLearning and online course solution is prone to a local file inclusion vulnerability because it fails to sufficiently verify user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks. WordPress Plugin Tutor LMS-eLearning and online course solution version 1.8.7 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.8.8 or latest
References
Related Vulnerabilities
WordPress Plugin Simple Download Monitor Cross-Site Scripting (3.5.3)
WordPress Plugin WooCommerce Open Redirect (3.7.0)
WordPress Plugin JobSearch WP Job Board Security Bypass (1.8.1)
WordPress Plugin WORDPRESS VIDEO GALLERY SQL Injection (2.7)
WordPress Plugin Author Chat Unspecified Vulnerability (1.9.0)