Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
1 IOC
Tutor LMS PHP Object Injection Flaw Lets Attackers Plant Web Shells on WordPress Sites
Excerpt
A critical vulnerability in the Tutor LMS WordPress plugin could allow low-privileged users to execute code remotely and plant web shells on vulnerable websites. Wordfence researchers, assisted by its Argus AI research agent, discovered the flaw on August 23, 2026. The issue affects Tutor LMS versions 4.0.7 and earlier, a widely used e-learning plugin installed on more than 100,000 WordPress sites. Tracked as CVE-2026-78175, the vulnerability received a CVSS score of 8.8 out…
Read the original report →Indicators of Compromise
Open the mindmap →1 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-78175 | Medium | Score 51/100 | First seen |
IOC Relationship Graph
Building graph…