CVE-2023-3133

PoC —

CVSS 3.1

7.5 high

EPSS

<1%p60

Published

Jul 4, 2023 (Jul 4, 2023)

Modified

Jun 17, 2026

Description

The Tutor LMS WordPress plugin before 2.2.1 does not implement adequate permission checks for REST API endpoints, allowing unauthenticated attackers to access information from Lessons that should not be publicly available.

Vendors: themeum
Products: tutor lms
Ecosystems: WordPress
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.