Skip to content
OpenAdvisories

Product · Themeum

Tutor LMS Pro

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-22332

    WordPress Tutor LMS Pro plugin <= 3.9.6 - SQL Injection vulnerability

    Unauthenticated SQL Injection in Tutor LMS Pro <= 3.9.6 versions.

    Themeum Tutor LMS Pro
  • Critical 9.8
    CVE-2026-0953

    Tutor LMS Pro <= 3.9.5 - Authentication Bypass via Social Login

    The Tutor LMS Pro plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 3.9.5 via the Social Login addon. This is due to the plugin failing to verify that the email provided in the authentication request matches the…

    Themeum Tutor LMS Pro Web / CMS