Threats tagged 'ghsa-96xm-q386-833c'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.4	EPSS 0.2%	CVE-2026-14310The Tutor LMS WordPress plugin before 4.0.0 does not properly verify that a user has access to the course a Q&A thread Medium5.4EPSS 0.2%2026-07-30GCVE DatabaseCVE-2026-14310 The Tutor LMS WordPress plugin versions before 4.0.0 contain an access control vulnerability where the plugin does not properly verify user permissions for Q&A threads tied to courses. Authenticated users with subscriber-level access or higher who can access any single course may read and reply to Q&A threads of other courses they should not have access to. EPSS 0.2%Report on CVE-2026-14310 Vulnerability CWE-639 #ghsa-96xm-q386-833c	GCVE Database	2026-07-30

Page 1 of 1