Sploitus

Exploit for CVE-2026-19092

cve · 2026-08-27

Exploit Code

MARKDOWN2 lines
## https://sploitus.com/exploit?id=CVE-2026-19092
The Tutor LMS WordPress plugin before 4.0.6 does not prevent request data from overwriting internal variables while rendering templates, allowing unauthenticated users to invoke arbitrary zero-argument PHP functions and receive their output.