TL
Product
Tutor LMS – eLearning and online course solution
31
CVEs
0
On KEV
8.8
Max CVSS
4
New 30D
Severity mix
Critical 0High 4Medium 27Low 0
Watch
Add Tutor LMS – eLearning and online course solution to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-78175 | 8.8 | Sep 12 | Tutor LMS <= 4.0.7 - Authenticated (Subscriber+) PHP Object Injection to Remote Code Execution Affected: through 4.0.7 |
| CVE-2026-1375 | 8.1 | Feb 3 | Tutor LMS <= 3.9.5 - Insecure Direct Object Reference to Authenticated (Instructor+) Arbitrary Course Modification and Deletion Affected: through 3.9.5 |
| CVE-2026-3360 | 7.5 | Apr 10 | Tutor LMS <= 3.9.7 - Missing Authorization to Unauthenticated Arbitrary Billing Profile Overwrite via 'order_id' Parameter Affected: through 3.9.7 |
| CVE-2025-13673 | 7.5 | Feb 28 | Tutor LMS <= 3.9.6 - Unauthenticated SQL Injection via coupon_code Affected: through 3.9.6 |
Showing 4