CVE-2026-0953

{"id": "CVE-2026-0953", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-0953", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-03-10T15:58:52.010194Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security@wordfence.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security@wordfence.com", "affectedData": [{"vendor": "themeum", "product": "Tutor LMS Pro", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "3.9.5"}], "defaultStatus": "unaffected"}]}], "published": "2026-03-10T17:31:40.537", "references": [{"url": "https://tutorlms.com/releases/id/393/", "source": "security@wordfence.com"}, {"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/92a120ac-66ae-4678-a87a-e62da885d50b?source=cve", "source": "security@wordfence.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security@wordfence.com", "description": [{"lang": "en", "value": "CWE-287"}]}], "descriptions": [{"lang": "en", "value": "The Tutor LMS Pro plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 3.9.5 via the Social Login addon. This is due to the plugin failing to verify that the email provided in the authentication request matches the email from the validated OAuth token. This makes it possible for unauthenticated attackers to log in as any existing user, including administrators, by supplying a valid OAuth token from their own account along with the victim's email address."}, {"lang": "es", "value": "El plugin Tutor LMS Pro para WordPress es vulnerable a una omisi\u00f3n de autenticaci\u00f3n en todas las versiones hasta la 3.9.5, inclusive, a trav\u00e9s del complemento Social Login. Esto se debe a que el plugin no verifica que el correo electr\u00f3nico proporcionado en la solicitud de autenticaci\u00f3n coincida con el correo electr\u00f3nico del token OAuth validado. Esto hace posible que atacantes no autenticados inicien sesi\u00f3n como cualquier usuario existente, incluidos los administradores, al proporcionar un token OAuth v\u00e1lido de su propia cuenta junto con la direcci\u00f3n de correo electr\u00f3nico de la v\u00edctima."}], "lastModified": "2026-06-17T10:11:40.757", "sourceIdentifier": "security@wordfence.com"}