Approved changes feed: RSS · Atom

cpe:2.3:a:themeum:tutorlms-migrationtool:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorThemeum (12449a9f-b8a3-5f81-9e39-f958a6d45415)
ProductTutorlms Migrationtool (22e05141-3143-5d58-892e-cd42b48c3fdc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-1798 vulnerable 2026-06-03 14:54:34.668931 Tutor LMS – Migration Tool <= 2.2.0 - Missing Authorization in tutor_lp_export_xml
MEDIUM (5.3)
The Tutor LMS – Migration Tool plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the tutor_lp_export_xml function in all versions up to, and including, 2.2.0. This makes it possible for unauthenticated attackers to export courses, including private and password protected courses.
Published: 2024-07-27T01:51:01.946Z
Updated: 2026-04-08T16:35:09.678Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.