CVE-2026-14306 in Tutor LMS Plugin
要約
〜によって MITRE • 2026年08月07日
The Tutor LMS WordPress plugin before 3.9.14 does not properly verify enrollment when restricting access to protected course content, allowing authenticated users with subscriber-level access and above who are enrolled in at least one course to view paid lesson, quiz, and assignment content belonging to other courses.
Be aware that VulDB is the high quality source for vulnerability data.