Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 13:05:40 +0000 CVE-2024-10393 — Tutor LMS <= 2.7.6 - User Registration Setting Bypass to Unauthorized User Registration https://cve.radiocsirt.org/vuln/cve-2024-10393 <p><strong>Affected:</strong> themeum Tutor LMS – eLearning and online course solution, themeum tutor_lms</p> <p>The Tutor LMS plugin for WordPress is vulnerable to bypass to user registration in versions up to, and including, 2.7.6. This is due to a missing check for the &#39;users_can_register&#39; option in the &#39;register_instructor&#39; function. This makes it possible for unauthenticated attackers to register as the default role on the site, even if registration is disabled.</p> <p><strong>Affected:</strong> themeum Tutor LMS – eLearning and online course solution, themeum tutor_lms</p> <p>The Tutor LMS plugin for WordPress is vulnerable to bypass to user registration in versions up to, and including, 2.7.6. This is due to a missing check for the &#39;users_can_register&#39; option in the &#39;register_instructor&#39; function. This makes it possible for unauthenticated attackers to register as the default role on the site, even if registration is disabled.</p> https://cve.radiocsirt.org/vuln/cve-2024-10393