VULNERABILITY INTELLIGENCE

CVE-2023-31330

CVSS score2.5 LOW

EPSS probability0.98%

CISA KEVNot currently listed

Published2025-09-06

Last modified2026-06-17

Description

The Tutor LMS WordPress plugin before 2.2.1 does not implement adequate permission checks for REST API endpoints, allowing unauthenticated attackers to access information from Lessons that should not be publicly available.