Beveiligingsadvies

CVE-2026-12271

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-13 06:00:01

Laatst bijgewerkt 2026-07-13 15:49:18

Toegewezen door WPScan

CVSS-score 5.4

Status PUBLISHED

Beschrijving

The Tutor LMS WordPress plugin before 3.9.13 does not verify ownership of the targeted quiz attempt before writing to it, allowing authenticated users with subscriber-level access and above to modify and force-complete other students' quiz attempts, overwriting their recorded marks and pass/fail result.

← Alle CVE's bekijken Bekijk op cve.org ↗