More than 100,000 WordPress sites using the Tutor LMS e-learning plugin were exposed to a high-severity remote code execution vulnerability that could allow low-privileged users to take control of vulnerable servers. The vulnerability was discovered on August 23, 2026, by Wordfence Argus, an AI-assisted vulnerability research agent, and validated by the Wordfence Threat Intelligence team. […]
The post Over 100,000 WordPress Sites Exposed to RCE Through Tutor LMS Vulnerability appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.