Input validation vulnerability in CLUEVO LMS, E-Learning Platform 1.13.2

The CLUEVO LMS, an E-Learning Platform for WordPress, has a security issue that allows unauthorized individuals to delete modules. This vulnerability is present in all versions of the plugin up to 1.13.2. It occurs because the cluevo_render_module_ui() function does not properly validate nonces. This means that attackers who are not logged in can manipulate a site administrator into clicking on a link, which will then allow them to delete modules through a fake request.

Detected in:

CLUEVO LMS, E-Learning Platform open vulnerable versions: >= * <= 1.13.2

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.