CVE-2024-1751

Summary

CVE-2024-1751 is a vulnerability affecting the Tutor LMS plugin for WordPress. This eLearning and online course solution is susceptible to time-based SQL Injection attacks due to inadequate escaping of user-supplied data and insufficient query preparation. Authenticated attackers, with subscriber or student access levels and higher, can exploit this vulnerability by appending malicious SQL queries to existing ones. The result is the extraction of sensitive information from the database. Versions up to and including 2.6.1 are reportedly impacted by this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.