CVE-2026-19094 | Tutor LMS Plugin up to 4.0.5 on WordPress sql injection

August 26, 2026 Yanac

A vulnerability described as critical has been identified in Tutor LMS Plugin up to 4.0.5 on WordPress. Affected is an unknown function. Executing a manipulation can lead to sql injection.

This vulnerability is registered as CVE-2026-19094. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More