Tutor LMS

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenSep 17, 2026
Last mentionedSep 18, 2026

Timeline

2 articles · newest first

Tutor LMS Flaw Exposes 100,000+ WordPress Sites to Remote Code Execution

A CVSS 8.8 PHP object injection flaw (CVE-2026-78175) in Tutor LMS exposes 100,000+ WordPress sites to subscriber-level remote code execution; patched in 4.0.8.

Cyber Security NewsSep 18, 11:52 UTC · Sep 18, 2026VulnerabilityCVE-2026-781751

100,000 WordPress Sites Exposed to Remote Code Execution via PHP Object Injection Vulnerability Found by Wordfence Argus in Tutor LMS

Wordfence found a PHP object injection flaw in Tutor LMS letting subscriber-level attackers achieve remote code execution on 100,000+ WordPress sites.

WordfenceSep 17, 20:17 UTC · Sep 17, 2026Vulnerability2 · 1 read

Related CVEs

by mentions

CVE-2026-781758.8
PHP Object Injection to RCE in Tutor LMS WordPress Plugin (≤ 4.0.7)
published Sep 12, 2026Themeum Tutor LMS – eLearning and online course solution plugin for WordPress

Appears with

Wordfencevendor · 2
Tutor LMSproduct · 2
Wordfenceorganization · 1
WordPressvendor · 1
Wordfence Argusproduct · 1
WordPressproduct · 1

Entities are extracted by the model from each article. First seen Sep 17, 2026, last mentioned Sep 18, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.