TL
Product
Tutor LMS
59
CVEs
0
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 2High 19Medium 35Low 3
Watch
Add Tutor LMS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-43142 | 8.8 | Nov 1 | Missing Authorization vulnerability in Themeum Tutor LMS allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tutor LMS: from n/a through… Affected: before 2.7.4 |
| CVE-2024-39645 | 8.8 | Aug 26 | Cross-Site Request Forgery (CSRF) vulnerability in Themeum Tutor LMS.This issue affects Tutor LMS: from n/a through 2.7.2 Affected: before 2.7.3 |
| CVE-2023-25799 | 8.8 | Jun 11 | Missing Authorization vulnerability in Themeum Tutor LMS.This issue affects Tutor LMS: from n/a through 2.1.8 Affected: before 2.1.9 |
| CVE-2024-4352 | 8.8 | May 16 | The Tutor LMS Pro plugin for WordPress is vulnerable to unauthorized access of data, modification of data, loss of data due to a missing capability check on the… Affected: before 2.7.1 |
| CVE-2024-4351 | 8.8 | May 16 | The Tutor LMS Pro plugin for WordPress is vulnerable to unauthorized access of data, modification of data, loss of data due to a missing capability check on the 'authenticate'… Affected: before 2.7.1 |
| CVE-2024-1751 | 8.8 | Mar 13 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to time-based SQL Injection via the question_id parameter in all versions up to, and… Affected: before 2.6.2 |
| CVE-2023-25990 | 8.8 | Nov 3 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor LMS allows SQL Injection.This issue affects Tutor LMS: from n/a… Affected: through 2.1.10 |
| CVE-2023-25800 | 8.8 | Nov 3 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor LMS allows SQL Injection.This issue affects Tutor LMS: from n/a… Affected: through 2.2.0 |
| CVE-2021-24184 | 8.8 | Apr 5 | Several AJAX endpoints in the Tutor LMS – eLearning and online course solution WordPress plugin before 1.7.7 were unprotected, allowing students to modify course information and… Affected: before 1.7.7 |
| CVE-2024-4222 | 8.2 | May 16 | The Tutor LMS Pro plugin for WordPress is vulnerable to unauthorized access of data, modification of data, loss of data due to a missing capability check on multiple functions in… Affected: before 2.7.1 |
| CVE-2025-58993 | 7.6 | Sep 9 | WordPress Tutor LMS Plugin <= 3.7.4 - SQL Injection Vulnerability Affected: through 3.7.4 |
| CVE-2024-10400 | 7.5 | Nov 21 | The Tutor LMS plugin for WordPress is vulnerable to SQL Injection via the ‘rating_filter’ parameter in all versions up to, and including, 2.7.6 due to insufficient escaping on the… Affected: through 2.7.6 |
| CVE-2023-3133 | 7.5 | Jul 4 | The Tutor LMS WordPress plugin before 2.2.1 does not implement adequate permission checks for REST API endpoints, allowing unauthenticated attackers to access information from… Affected: before 2.2.1 |
| CVE-2024-43282 | 7.2 | Aug 18 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor LMS.This issue affects Tutor LMS: from n/a through 2.7.2 Affected: before 2.7.3 |
| CVE-2024-37266 | 7.2 | Jul 9 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Themeum Tutor LMS allows Path Traversal.This issue affects Tutor LMS: from n/a… Affected: before 2.7.2 |
| CVE-2024-37256 | 7.2 | Jul 9 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor LMS.This issue affects Tutor LMS: from n/a through 2.7.1 Affected: before 2.7.2 |
| CVE-2024-4902 | 7.2 | Jun 7 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to time-based SQL Injection via the ‘course_id’ parameter in all versions up to, and… Affected: before 2.7.2 |
| CVE-2026-42702 | 7.1 | Oct 10 | WordPress Tutor LMS plugin <= 4.1.0 - Cross Site Scripting (XSS) vulnerability Affected: through 4.1.0 |
| CVE-2024-5784 | 7.1 | Aug 30 | The Tutor LMS Pro plugin for WordPress is vulnerable to unauthorized administrative actions execution due to a missing capability checks on multiple functions like… Affected: before 2.7.3 |
Showing 19