Tutor LMS

Mentions · 7d0
Mentions · 30d0
All mentions3
First seenSep 17, 2026
Last mentionedSep 18, 2026

Timeline

3 articles · newest first

Tutor LMS Flaw Exposes 100,000+ WordPress Sites to Remote Code Execution

A CVSS 8.8 PHP object injection flaw (CVE-2026-78175) in Tutor LMS exposes 100,000+ WordPress sites to subscriber-level remote code execution; patched in 4.0.8.

Cyber Security NewsSep 18, 11:52 UTC · Sep 18, 2026VulnerabilityCVE-2026-781751

Over 100,000 WordPress Sites Exposed to RCE Through Tutor LMS Vulnerability

Wordfence disclosed CVE-2026-78175, an authenticated PHP object injection chain enabling RCE in Tutor LMS affecting 100,000+ WordPress sites; fixed in 4.0.8.

GBHackersSep 18, 10:04 UTC · Sep 18, 2026VulnerabilityCVE-2026-781755 · 2 reads

100,000 WordPress Sites Exposed to Remote Code Execution via PHP Object Injection Vulnerability Found by Wordfence Argus in Tutor LMS

Wordfence found a PHP object injection flaw in Tutor LMS letting subscriber-level attackers achieve remote code execution on 100,000+ WordPress sites.

WordfenceSep 17, 20:17 UTC · Sep 17, 2026Vulnerability2 · 1 read

Related CVEs

by mentions

CVE-2026-781758.8
PHP Object Injection to RCE in Tutor LMS WordPress Plugin (≤ 4.0.7)
published Sep 12, 2026Themeum Tutor LMS – eLearning and online course solution plugin for WordPress

Appears with

WordPressproduct · 2
Wordfencevendor · 2
WordPressvendor · 2
Wordfenceorganization · 2
Tutor LMSvendor · 2
Themeumvendor · 1
Wordfence Argusproduct · 1
Guzzlevendor · 1

Entities are extracted by the model from each article. First seen Sep 17, 2026, last mentioned Sep 18, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.