Boletines de Vulnerabilidades

Several Vulnerabilities Patched in Tutor LMS Plugin


Información sobre el sistema

   
Software afectado Wordpress

Descripción

On December 15, 2020, our Threat Intelligence team responsibly disclosed several vulnerabilities in Tutor LMS, a WordPress plugin installed on over 20,000 sites. The first five flaws made it possible for authenticated attackers to inject and execute arbitrary SQL statements on WordPress sites. This made it possible for attackers to obtain information stored in a […]

More info:

https://www.wordfence.com/blog/2021/03/several-vulnerabilities-patched-in-tutor-lms-plugin/

Identificadores estándar

Propiedad Valor
CVE

Histórico de versiones

Versión Comentario Fecha
1.0 Advisory issued 2021-03-19

Miembros de

Ministerio de Defensa
CNI
CCN
CCN-CERT