corpus.blog
42,390 blogs · 5,361,753 posts Claim your blog
Record · corpus.blog/posts/01a08784-d607-727c-a49f-c66e6f1181b4

CVE-2026-3360: Tutor LMS Unauthenticated Billing Overwrite (CVSS 7.5)

hurayraiit.com · published 10 April 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at hurayraiit.com Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
External links
11
Words captured
2,080

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://wordpress.org/plugins/tutor/
wordpress.org
https://www.cve.org/CVERecord?id=CVE-2026-3360
cve.org
https://downloads.wordpress.org/plugin/tutor.3.9.7.zip
downloads.wordpress.org
https://downloads.wordpress.org/plugin/tutor.3.9.8.zip
downloads.wordpress.org
https://www.wordfence.com/threat-intel/vulnerabilities/researchers/supakiad-s
wordfence.com
https://www.linkedin.com/in/supakiad-satuwan/
linkedin.com
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/tutor/tutor-lms-397-missing-authorization-to-unauthenticated-arbitrary-billing-profile-overwrite-via-order-id-parameter
wordfence.com
https://plugins.trac.wordpress.org/browser/tutor/tags/3.9.7/classes/Tutor.php
plugins.trac.wordpress.org
https://plugins.trac.wordpress.org/browser/tutor/tags/3.9.7/ecommerce/CheckoutController.php
plugins.trac.wordpress.org
https://plugins.trac.wordpress.org/browser/tutor/trunk/ecommerce/CheckoutController.php
plugins.trac.wordpress.org
https://plugins.trac.wordpress.org/changeset/3496394/tutor/trunk/ecommerce/CheckoutController.php
plugins.trac.wordpress.org