Skip to content
OpenAdvisories

Product · Themeum

Tutor LMS

22 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-111407

    WordPress Tutor LMS plugin <= 4.1.2 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Tutor LMS tutor allows Stored XSS.This issue affects Tutor LMS: from n/a through 4.1.2.

    Themeum Tutor LMS
  • Medium 5.3
    CVE-2026-42698

    WordPress Tutor LMS plugin <= 4.1.1 - Race Condition vulnerability

    Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Themeum Tutor LMS tutor allows Leveraging Race Conditions.This issue affects Tutor LMS: from n/a through 4.1.1.

    Themeum Tutor LMS
  • Medium 6.5
    CVE-2026-57694

    WordPress Tutor LMS plugin <= 3.9.13 - Insecure Direct Object References (IDOR) vulnerability

    Authorization Bypass Through User-Controlled Key vulnerability in Themeum Tutor LMS tutor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tutor LMS: from n/a through <= 3.9.13.

    Themeum Tutor LMS
  • Medium 6.5
    CVE-2026-40743

    WordPress Tutor LMS plugin <= 3.9.7 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in Tutor LMS <= 3.9.7 versions.

    Themeum Tutor LMS
  • Medium 5.4
    CVE-2026-40740

    WordPress Tutor LMS plugin <= 3.9.7 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Themeum Tutor LMS tutor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tutor LMS: from n/a through <= 3.9.7.

    Themeum Tutor LMS
  • Medium 6.5
    CVE-2025-32223

    WordPress Tutor LMS plugin <= 3.9.4 - Insecure Direct Object References (IDOR) vulnerability

    Authorization Bypass Through User-Controlled Key vulnerability in Themeum Tutor LMS tutor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tutor LMS: from n/a through <= 3.9.4.

    Themeum Tutor LMS
  • Medium 6.5
    CVE-2026-23799

    WordPress Tutor LMS plugin <= 3.9.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Themeum Tutor LMS tutor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tutor LMS: from n/a through <= 3.9.5.

    Themeum Tutor LMS
  • Medium 4.3
    CVE-2025-32230

    WordPress Tutor LMS plugin <= 3.4.0 - HTML Injection vulnerability

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Themeum Tutor LMS tutor.This issue affects Tutor LMS: from n/a through <= 3.4.0.

    Themeum Tutor LMS
  • Medium 4.3
    CVE-2024-43142

    WordPress Tutor LMS plugin <= 2.7.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Themeum Tutor LMS allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tutor LMS: from n/a through 2.7.3.

    Themeum Tutor LMS
  • Medium 5.4
    CVE-2024-39645

    WordPress Tutor LMS plugin <= 2.7.2 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Themeum Tutor LMS.This issue affects Tutor LMS: from n/a through 2.7.2.

    Themeum Tutor LMS
  • Medium 6.5
    CVE-2024-43231

    WordPress Tutor LMS plugin <= 2.7.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Themeum Tutor LMS allows Stored XSS.This issue affects Tutor LMS: from n/a through 2.7.3.

    Themeum Tutor LMS
  • Medium 5.9
    CVE-2024-37947

    WordPress Tutor LMS plugin <= 2.7.2 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Themeum Tutor LMS allows Stored XSS.This issue affects Tutor LMS: from n/a through 2.7.2.

    Themeum Tutor LMS
  • Medium 4.9
    CVE-2024-37266

    WordPress Tutor LMS plugin <= 2.7.1 - Path Traversal vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Themeum Tutor LMS allows Path Traversal.This issue affects Tutor LMS: from n/a through 2.7.1.

    Themeum Tutor LMS