Vulnerability — CVE-2023-3133

CVE-2023-3133

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2023-3133
Description:: The Tutor LMS WordPress plugin before 2.2.1 does not implement adequate permission checks for REST API endpoints, allowing unauthenticated attackers to access information from Lessons that should not be publicly available.
Last updated date:: 07/11/2023

Type:: exploit
Confidence:: HIGH
Date of publishing:: 07/11/2023
Reference url to background: https://wpscan.com/vulnerability/3b6969a7-5cbc-4e16-8f27-5dde481237f5