Themeum Tutor LMS Pro Broken Authentication Vulnerability

A vulnerability allowing authentication bypass has been identified in the Themeum Tutor LMS Pro plugin, affecting versions through 3.9.4. This flaw allows unauthorized users to perform actions typically reserved for higher-privileged users, potentially leading to unauthorized admin access.

Impact

Exploitation of this vulnerability could allow an attacker to gain administrative privileges on the affected WordPress site, enabling them to perform any actions available to an admin user.

Remediation

Users are advised to update the Tutor LMS Pro plugin to the latest version. If an update cannot be applied, contact your hosting provider or web developer for assistance.