Skip to content
OpenAdvisories

Product · Themeum

Tutor LMS – eLearning and online course solution

48 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2025-13673 Public exploit

    Tutor LMS <= 3.9.6 - Unauthenticated SQL Injection via coupon_code

    The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to SQL Injection via the 'coupon_code' parameter in all versions up to, and including, 3.9.6 due to insufficient escaping on the user supplied parameter and lack of suffic…

    Themeum Tutor LMS – eLearning and online course solution Web / CMS
  • High 8.1
    CVE-2026-1375 Public exploit

    Tutor LMS <= 3.9.5 - Insecure Direct Object Reference to Authenticated (Instructor+) Arbitrary Course Modification and Deletion

    The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object References (IDOR) in all versions up to, and including, 3.9.5. This is due to missing object-level authorization checks in the `course_list_bulk_…

    Themeum Tutor LMS – eLearning and online course solution Web / CMS
  • High 7.5
    CVE-2024-10400 Public exploit Scanner template EPSS 83%

    Tutor LMS <= 2.7.6 - Unauthenticated SQL Injection via rating_filter

    The Tutor LMS plugin for WordPress is vulnerable to SQL Injection via the ‘rating_filter’ parameter in all versions up to, and including, 2.7.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL …

    Themeum Tutor LMS – eLearning and online course solution Web / CMS