CVE-2026-14306 | BDVDB-2026-355755 Detail

Description#

The Tutor LMS WordPress plugin before 3.9.14 does not properly verify enrollment when restricting access to protected course content, allowing authenticated users with subscriber-level access and above who are enrolled in at least one course to view paid lesson, quiz, and assignment content belonging to other courses.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-08-06Record published in the CVE List.
2. Version 22026-08-07Most recent update recorded in the CVE List.