https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T10:47:01.820105+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-19092 CVE-2026-19092 — Tutor LMS < 4.0.6 - Unauthenticated Arbitrary Zero-Argument Function Invocation via Template Variable Shadowing 2026-09-30T10:47:01.821717+00:00

Affected: Unknown Tutor LMS

The Tutor LMS WordPress plugin before 4.0.6 does not prevent request data from overwriting internal variables while rendering templates, allowing unauthenticated users to invoke arbitrary zero-argument PHP functions and receive their output.