CVE-2026-25406Disclosure

LOWCVSS 8.1 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Prioritize remediation for affected systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft
Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

Authentication Bypass Using an Alternate Path or Channel vulnerability in Themeum Tutor LMS Pro tutor-pro allows Authentication Abuse.This issue affects Tutor LMS Pro: from n/a through <= 3.9.4.

Back to dashboard

3.5/ 10 priority

Sources & remediation

Other references

https://patchstack.com/database/Wordpress/Plugin/tutor-pro/vulnerability/wordpress-tutor-lms-pro-plugin-3-9-4-broken-authentication-vulnerability?_s_id=cve

Weakness type (CWE)

CWE-288

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Threat summary

Public PoC and exploit tooling are both present
3 mentions across 2 observed days
Momentum state: stable

What's happening

Exploit tool or code specified in 1 signal
PoC mentioned or linked in 1 signal
Technical details provided in 2 signals
Disclosure: 2 classified signals
Peaked 1d ago at 2 mentions (2026-03-29); latest day: 1
3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d

Signal classification2 categories

Disclosure

266.7%

PoC

133.3%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-29	2	Disclosure2
2026-04-10	1	PoC1

Full discourse3 posts

CVE@CVEnew193d
Disclosure
CVE-2026-25406 Authentication Bypass Using an Alternate Path or Channel vulnerability in Themeum Tutor LMS Pro tutor-pro allows Authentication Abuse.This issue affects Tutor LMS Pro… https://www.cve.org/CVERecord?id=CVE-2026-25406
Post summary
The post points to the CVE record for CVE-2026-25406 and briefly notes an authentication bypass issue in Themeum Tutor LMS Pro. No further technical, exploit, or mitigation details are provided.
00010736
56.9K followersView on X
Atomic Edge@atomicedgeWAF182d
PoC
https://atomicedge.io/cve-proof/cve-2026-25406-tutor-pro-version-3-9-4-medium-vulnerability-proof-of-concept CVE-2026-25406 #WordPress plugin #vulnerability tutor-pro #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge
Post summary
The post discloses CVE‑2026‑25406 and supplies a proof‑of‑concept demonstrating how the medium‑severity vulnerability in Tutor‑Pro 3.9.4 can be exploited.
0000037
6 followersView on X
Infoflowcloud@infoflowcloud193d
Disclosure
🚨*CVE* CVE-2026-25406 Authentication Bypass Using an Alternate Path or Channel vulnerability in Themeum Tutor LMS Pro tutor-pro allows Authentication Abuse.This issue affects Tutor LMS Pro… https://www.cve.org/CVERecord?id=CVE-2026-25406 ----- Traducción: CVE-2026-25406 Omi… http://infoflow.cloud`
Post summary
The tweet announces CVE‑2026‑25406, providing a brief description and a link to the official CVE record.
0000031
65 followersView on X

Explore more

Back to dashboard