A vulnerability described as problematic has been identified in Tutor LMS Plugin up to 3.9.5 on WordPress. This issue affects the function
ajax_coupon_details of the component Coupon Details Handler. The manipulation results in missing authorization.
This vulnerability was named CVE-2026-1371. The attack may be performed from remote. There is no available exploit.
