{"id":3186,"date":"2024-03-12T13:45:29","date_gmt":"2024-03-12T13:45:29","guid":{"rendered":"http:\/\/127.0.0.1\/tutor-lms-solucion-de-elearning-y-cursos-en-linea-2-6-1-cross-site-request-forgery-para-desactivacion-de-plugin-y-borrado-de-datos\/"},"modified":"2024-03-12T13:45:29","modified_gmt":"2024-03-12T13:45:29","slug":"tutor-lms-solucion-de-elearning-y-cursos-en-linea-2-6-1-cross-site-request-forgery-para-desactivacion-de-plugin-y-borrado-de-datos","status":"publish","type":"post","link":"http:\/\/127.0.0.1\/tutor-lms-solucion-de-elearning-y-cursos-en-linea-2-6-1-cross-site-request-forgery-para-desactivacion-de-plugin-y-borrado-de-datos\/","title":{"rendered":"Tutor LMS \u2013 Soluci\u00f3n de eLearning y cursos en l\u00ednea <= 2.6.1 – Cross-Site Request Forgery para Desactivaci\u00f3n de Plugin y Borrado de Datos"},"content":{"rendered":"
<\/p>\n
La vulnerabilidad de Cross-Site Request Forgery (CSRF) en el plugin Tutor LMS – Soluci\u00f3n de eLearning y cursos en l\u00ednea para WordPress afecta a todas las versiones hasta y incluyendo la 2.6.1. Esta vulnerabilidad se debe a una validaci\u00f3n de nonce faltante o incorrecta en la funci\u00f3n erase_tutor_data(). Esto permite que atacantes no autenticados desactiven […]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[899],"class_list":["post-3186","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-cve-2024-1503"],"yoast_head":"\n