Skip to content
OpenAdvisories

Product · Themeum

Tutor LMS

22 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.1
    CVE-2026-42702

    WordPress Tutor LMS plugin <= 4.1.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Tutor LMS tutor allows Reflected XSS.This issue affects Tutor LMS: from n/a through 4.1.0.

    Themeum Tutor LMS
  • High 7.6
    CVE-2025-58993

    WordPress Tutor LMS Plugin <= 3.7.4 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor LMS tutor allows SQL Injection.This issue affects Tutor LMS: from n/a through <= 3.7.4.

    Themeum Tutor LMS
  • High 7.6
    CVE-2024-43282

    WordPress Tutor LMS plugin <= 2.7.2 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor LMS.This issue affects Tutor LMS: from n/a through 2.7.2.

    Themeum Tutor LMS
  • High 7.6
    CVE-2024-37256

    WordPress Tutor LMS plugin <= 2.7.1 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor LMS.This issue affects Tutor LMS: from n/a through 2.7.1.

    Themeum Tutor LMS
  • High 8.3
    CVE-2023-25799

    WordPress Tutor LMS plugin <= 2.1.8 - Multiple Broken Access Control vulnerabilities

    Missing Authorization vulnerability in Themeum Tutor LMS.This issue affects Tutor LMS: from n/a through 2.1.8.

    Themeum Tutor LMS
  • High 8.2
    CVE-2023-25700

    WordPress Tutor LMS Plugin <= 2.1.10 is vulnerable to SQL Injection

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor LMS allows SQL Injection.This issue affects Tutor LMS: from n/a through 2.1.10.

    Themeum Tutor LMS
  • High 8.1
    CVE-2023-25800

    WordPress Tutor LMS Plugin <= 2.2.0 is vulnerable to SQL Injection

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor LMS allows SQL Injection.This issue affects Tutor LMS: from n/a through 2.2.0.

    Themeum Tutor LMS
  • High 7.1
    CVE-2023-25990

    WordPress Tutor LMS Plugin <= 2.1.10 is vulnerable to SQL Injection

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor LMS allows SQL Injection.This issue affects Tutor LMS: from n/a through 2.1.10.

    Themeum Tutor LMS