Input validation vulnerability in Tutor LMS – eLearning and online course solution 3.7.4

The Tutor LMS plugin for WordPress has a security weakness that allows hackers to access sensitive information from the database. This vulnerability exists in versions up to and including 3.7.4 because the plugin does not properly protect against SQL Injection attacks. This means that attackers with administrator-level access or higher can add their own malicious code to existing queries, potentially giving them access to private data.