Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-06-17
Tutor LMS - Migration Tool - Broken Access Control (CVE-2024-1804)
The Tutor LMS – Migration Tool plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the tutor_import_from_xml function in all versions up to, and including, 2.2.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to import courses.
PLUGIN
Tutor LMS - Migration Tool
CVE-2024-1804
Risk Score
Threat Entry
Updated 2026-06-17
Tutor LMS - Migration Tool - Broken Access Control (CVE-2024-1798)
The Tutor LMS – Migration Tool plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the tutor_lp_export_xml function in all versions up to, and including, 2.2.0. This makes it possible for unauthenticated attackers to export courses, including private and password protected courses.
PLUGIN
Tutor LMS - Migration Tool
CVE-2024-1798
Risk Score