TL
Product
Tutor LMS
59
CVEs
0
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 2High 19Medium 35Low 3
Watch
Add Tutor LMS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-6680 | 4.3 | Oct 25 | Tutor LMS <= 3.8.3 - Missing Authorization to Sensitive Information Exposure Affected: before 3.9.0 |
| CVE-2023-2919 | 4.3 | Sep 10 | Tutor LMS <= 2.7.4 - Cross-Site Request Forgery via 'addon_enable_disable' Affected: before 2.7.5 |
| CVE-2024-5438 | 4.3 | Jun 7 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.7.1 via the… Affected: before 2.7.2 |
| CVE-2024-1503 | 4.3 | Mar 21 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.6.1 Affected: before 2.6.2 |
| CVE-2024-1502 | 4.3 | Mar 21 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the… Affected: before 2.6.2 |
| CVE-2024-1133 | 4.3 | Feb 29 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized access of restricted Q&A content due to a missing capability check when… Affected: before 2.6.1 |
| CVE-2025-47555 | 3.8 | Jan 22 | WordPress Tutor LMS plugin <= 3.9.4 - Insecure Direct Object References (IDOR) vulnerability Affected: through 3.9.4 |
| CVE-2021-24242 | 3.8 | Apr 22 | The Tutor LMS – eLearning and online course solution WordPress plugin before 1.8.8 is affected by a local file inclusion vulnerability through the maliciously constructed sub_page… Affected: before 1.8.8 |
| CVE-2024-1128 | 3.5 | Feb 29 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to HTML Injection in all versions up to, and including, 2.6.0 Affected: before 2.6.1 |