VulnSocial

CVE-2026-12275General

LOWCVSS 7.1 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

The Tutor LMS WordPress plugin before 3.9.13 does not, in its Droip and Kirki page-builder integration, perform the enrollment, purchase, and private-course capability checks it enforces in its core course handler, allowing authenticated users with subscriber-level access to enroll in paid or private courses without authorization, read private course content, and mark arbitrary courses as completed, on sites where the Droip or Kirki integration is active.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • General: 2 classified signals
  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-07-13: 207-13
Signal classification1 categories
General
2100.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • Infoflowcloud@infoflowcloud
    General

    🚨*CVE* CVE-2026-12275 The Tutor LMS WordPress plugin before 3.9.13 does not, in its Droip and Kirki page-builder integration, perform the enrollment, purchase, and private-course capabili… https://www.cve.org/CVERecord?id=CVE-2026-12275 ----- Traducción: CVE-2026-12275 El … http://infoflow.cloud`

    Post summary

    The text only lists a CVE for the Tutor LMS WordPress plugin and mentions a short malfunctioning aspect, without revealing PoC, exploit, patch, or technical details.

    0000027
    92 followersView on X
  • CVE@CVEnew
    General

    CVE-2026-12275 The Tutor LMS WordPress plugin before 3.9.13 does not, in its Droip and Kirki page-builder integration, perform the enrollment, purchase, and private-course capabili… https://www.cve.org/CVERecord?id=CVE-2026-12275

    Post summary

    The post merely references CVE‑2026‑12275 with a link and notes a version limitation, lacking any deeper technical, exploit, or remediation details.

    00000653
    57.8K followersView on X

Explore more

Back to dashboard