https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T10:49:25.656956+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-03228 bdu:2025-03228 2026-10-16T10:49:25.659764+00:00 bdu:2025-03228 https://cve.radiocsirt.org/vuln/euvd-2026-284373 EUVD-2026-284373 2026-10-16T10:49:25.659798+00:00 EUVD-2026-284373 https://cve.radiocsirt.org/vuln/fkie_cve-2024-4351 fkie_cve-2024-4351 2026-10-16T10:49:25.659812+00:00

The Tutor LMS Pro plugin for WordPress is vulnerable to unauthorized access of data, modification of data, loss of data due to a missing capability check on the 'authenticate' function in all versions up to, and including, 2.7.0. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to gain control of an existing administrator account.

 https://cve.radiocsirt.org/vuln/ghsa-2cvr-cjfw-9xmv GHSA-2cvr-cjfw-9xmv 2026-10-16T10:49:25.659842+00:00

The Tutor LMS Pro plugin for WordPress is vulnerable to unauthorized access of data, modification of data, loss of data due to a missing capability check on the 'authenticate' function in all versions up to, and including, 2.7.0. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to gain control of an existing administrator account.