CVE-2024-3553

Summary

CVE-2024-3553 is a vulnerability affecting the Tutor LMS plugin for WordPress. The issue lies in the lack of capability checks on the hide_notices function, which is present in all versions up to 2.6.2. As a result, unauthenticated attackers can manipulate data, leading to unauthorized user registration on sites that have this feature disabled. This vulnerability poses a significant risk to WordPress sites using the Tutor LMS plugin and should be addressed promptly through an update to a patched version.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.