Tutor LMS Plugin Exposes WordPress Credentials Due to Route Validation Flaw

Ciberseguridadlatam

Tutor LMS Plugin Exposes WordPress Credentials Due to Route Validation Flaw

First seen 24 Aug 2026, 10:46 UTC • •72.0

Article Content

1 / 3

Browse articles

ThreatCluster •August 25, 2026 at 10:19 UTC

•CVE-2026-19093 allows unauthorized access to critical WordPress files.
•Thousands of e-learning sites using Tutor LMS are at risk due to this vulnerability.
•Immediate action is required from site administrators to secure their systems.

A vulnerability in the Tutor LMS plugin for WordPress, identified as CVE-2026-19093, allows instructors to access critical server files, including wp-config.php, which contains database and authentication keys. This flaw affects thousands of e-learning sites globally, posing a significant risk to sensitive information. The vulnerability was published on 2026-08-22, and its exploitation could lead to unauthorized access to databases and potential data breaches. Administrators of affected sites are urged to take immediate action to mitigate risks. The plugin is widely used, increasing the scope of potential impact across various educational platforms.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 47d ago How this analysis works

Timeline

2026-08-22

CVE-2026-19093 published

The vulnerability in Tutor LMS was officially disclosed, allowing instructors to read sensitive server files.

Ciberseguridadlatam

2026-08-24

Security articles published

Two articles were released detailing the vulnerability and its implications for WordPress users.

Ciberseguridadlatam

More articles in this cluster (2)

Threat Graph

7 entities, 6 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (3)

Data Breach
T1003 - OS Credential Dumping
T1190 - Exploit Public-Facing Application

Vulnerability (1)

CVE-2026-19093

Weakness (2)

CWE-200 - Exposure of Sensitive Information
CWE-22 - Path Traversal

Affected Platform (1)

WordPress

Relationships

CVE-2026-19093 targets WordPress
Data Breach targets WordPress
T1003 - OS Credential Dumping targets WordPress
T1190 - Exploit Public-Facing Application targets WordPress
CVE-2026-19093 related to CWE-200 - Exposure of Sensitive Information
CVE-2026-19093 related to CWE-22 - Path Traversal

Following this threat?

Track CVE-2026-19093 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…

CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…