CVE-2026-40743

A security flaw exists in Tutor LMS plugin for WordPress, specifically affecting versions prior to or equal to 3.9.7, where a critical capability check is absent from a function, enabling malicious actors without authentication to execute unintended actions. This oversight compromises the integrity of the system by allowing unauthorized access and potentially leading to further vulnerabilities.

Based on public CVE data (MITRE/NVD).