Description
Unauthenticated SQL Injection in Tutor LMS Pro <= 3.9.6 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Themeum | Tutor LMS Pro | ≤ 3.9.6 | — |
Critical · 9.3
CVE-2026-22332
EUVD-2026-37655GHSA-g864-f7cv-5w64
WordPress Tutor LMS Pro plugin <= 3.9.6 - SQL Injection vulnerability
Published Jun 17, 2026 · Updated Jun 17, 2026 · Assigned by Patchstack