cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score
CVE-2024-1798,https://securityvulnerability.io/vulnerability/CVE-2024-1798,Unauthorized Access to Data through Missing Capability Check in Tutor LMS Migration Tool,"The Tutor LMS – Migration Tool plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the tutor_lp_export_xml function in all versions up to, and including, 2.2.0. This makes it possible for unauthenticated attackers to export courses, including private and password protected courses.",Wordpress,Tutor Lms – Migration Tool,5.3,MEDIUM,0.0004600000102072954,false,,false,false,false,,false,false,2024-07-27T02:15:00.000Z,0
CVE-2024-1804,https://securityvulnerability.io/vulnerability/CVE-2024-1804,Unauthorized Modification of Data in The Tutor LMS Migration Tool Plugin,"The Tutor LMS – Migration Tool plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the tutor_import_from_xml function in all versions up to, and including, 2.2.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to import courses.",Wordpress,Tutor Lms – Migration Tool,4.3,MEDIUM,0.00044999999227002263,false,,false,false,false,,false,false,2024-07-27T02:15:00.000Z,0