Skip to content
Threat Feed
Subscribe

Product

Tutor LMS (<= 4.0.7)

1 brief RSS
high advisory

PHP Object Injection in Tutor LMS Plugin for WordPress

Tutor LMS plugin versions up to 4.0.7 are vulnerable to remote code execution via PHP object injection in the tutor_save_withdraw_account AJAX handler, allowing attackers to leverage POP chains.

Tutor LMS wordpress rce php-injection vulnerability
1r 1t 1c