Themeum Tutor Lms Migration Tool vulnerabilities

2 vulnerabilities

Known vulnerabilities in Themeum Tutor Lms Migration Tool, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.3CVE-2024-1798themeumtutor_lms_-_migration_tool+1
EPSS score
0.41%
The Tutor LMS – Migration Tool plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the tutor_lp_export_xml function in all versions up to, and including, 2.2.0. This makes it possible for unauthenticated attackers to export courses, including private and password protected courses.4.3CVE-2024-1804themeumtutor_lms_-_migration_tool+1
EPSS score
0.32%
The Tutor LMS – Migration Tool plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the tutor_import_from_xml function in all versions up to, and including, 2.2.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to import courses.