云虫漏洞情报

CVE-2026-19092 - The Tutor LMS WordPress plugin before 4.0.6 does not prevent request data from overwriting internal variables while rendering templates, allowing unauthenticated users to invoke arbitrary zero-argument PHP functions and receive their output. - 漏洞详情

漏洞编号:CVE-2026-19092

风险等级:危急

漏洞来源:CVE

CVE 编号:CVE-2026-19092

CNNVD 编号:-

厂商/产品:- / -

影响范围:-

CWE:CWE-74

发布/更新时间:2026-08-27 / 2026-08-28

漏洞描述

The Tutor LMS WordPress plugin before 4.0.6 does not prevent request data from overwriting internal variables while rendering templates, allowing unauthenticated users to invoke arbitrary zero-argument PHP functions and receive their output.

相关链接

相关漏洞

« 返回首页