Description
Unauthenticated Broken Access Control in Tutor LMS <= 3.9.7 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Themeum | Tutor LMS | ≤ 3.9.7 | — |
Medium · 6.5
CVE-2026-40743
EUVD-2026-36974GHSA-8mgw-v23g-2v44
WordPress Tutor LMS plugin <= 3.9.7 - Broken Access Control vulnerability
Published Jun 15, 2026 · Updated Jun 16, 2026 · Assigned by Patchstack