Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Buy Us a Coffee

Tutorial LMS 4.0.7: Authenticated PHP Object Injection leads to RCE

www.wordfence.com 2026-09-12 查看中文 →

Security Advisory Critical Tutor LMS

Affected:

Tutor LMS <= 4.0.7

Fixed in:

Tutor LMS 4.0.8

Referenced CVEs: CVE-2026-78175 · 8.8

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from www.wordfence.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

MVC 4.1.1 Unauthenticated SQL Injection via URL Path (CVSS 9.8) 2026-09-12 The Events Calendar PHP Unserialization RCE (<=5.7.4) PoC 2026-09-12 CT-LMS Missing Authorization RCE & Data Breach Analysis 2026-09-12 WordPress Plugin Royal Address for Elementor Unauthenticated Info Exposure 2026-09-12

Offline Archive

Offline screenshot & PDF are Pro-exclusive

Upgrade to Pro