TL
Product
Tutor LMS
60
CVEs
0
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 2High 19Medium 36Low 3
Watch
Add Tutor LMS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-6680 | 4.3 | Oct 25 | Tutor LMS <= 3.8.3 - Missing Authorization to Sensitive Information Exposure Affected: before 3.9.0 |
| CVE-2025-32230 | 4.3 | Apr 10 | WordPress Tutor LMS plugin <= 3.4.0 - HTML Injection vulnerability Affected: through 3.4.0 |
| CVE-2023-2919 | 4.3 | Sep 10 | Tutor LMS <= 2.7.4 - Cross-Site Request Forgery via 'addon_enable_disable' Affected: before 2.7.5 |
| CVE-2024-5438 | 4.3 | Jun 7 | Tutor LMS – eLearning and online course solution <= 2.7.1 - Authenticated (Instructor+) Insecure Direct Object Reference to Arbitrary Quiz Attempt Deletion Affected: before 2.7.2 |
| CVE-2024-1502 | 4.3 | Mar 12 | Tutor LMS – eLearning and online course solution <= 2.6.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion Affected: before 2.6.2 |
| CVE-2024-1503 | 4.3 | Mar 12 | Tutor LMS – eLearning and online course solution <= 2.6.1 - Cross-Site Request Forgery to Plugin Deactivation and Data Erase Affected: before 2.6.2 |
| CVE-2024-1133 | 4.3 | Feb 20 | Tutor LMS <= 2.6.0 - Missing Authorization Affected: before 2.6.1 |
| CVE-2025-47555 | 3.8 | Jan 22 | WordPress Tutor LMS plugin <= 3.9.4 - Insecure Direct Object References (IDOR) vulnerability Affected: through 3.9.4 |
| CVE-2021-24242 | 3.8 | Apr 22 | The Tutor LMS – eLearning and online course solution WordPress plugin before 1.8.8 is affected by a local file inclusion vulnerability through the maliciously constructed sub_page… Affected: before 1.8.8 |
| CVE-2024-1128 | 3.5 | Feb 20 | Tutor LMS <= 2.6.0 - Authenticated(Student+) HTML Injection via Q&A Affected: before 2.6.1 |