The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the hide_notices function in all versions up to, and including, 2.6.2. This makes it possible for unauthenticated attackers to enable user registration on sites that may have it disabled.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| themeum | Tutor LMS – eLearning and online course solution | unaffected |
|
No data.
No data.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2024-32139 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the hide_notices function in all versions up to, and including, 2.6.2. This makes it possible for unauthenticated attackers to enable user registration on sites that may have it disabled. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Wed, 15 Jan 2025 19:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Themeum
Themeum tutor Lms |
|
| Weaknesses | CWE-862 | |
| CPEs | cpe:2.3:a:themeum:tutor_lms:*:*:*:*:*:wordpress:*:* | |
| Vendors & Products |
Themeum
Themeum tutor Lms |
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: Wordfence
Published:
Updated: 2024-08-01T20:12:07.680Z
Reserved: 2024-04-09T20:47:28.586Z
Link: CVE-2024-3553
Vulnrichment
Updated: 2024-08-01T20:12:07.680Z
NVD
Status : Analyzed
Published: 2024-05-02T17:15:26.923
Modified: 2025-01-15T18:36:47.993
Link: CVE-2024-3553
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses