TL
Product
Tutor LMS
60
CVEs
0
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 2High 19Medium 36Low 3
Watch
Add Tutor LMS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-43142 | 8.8 | Nov 1 | WordPress Tutor LMS plugin <= 2.7.3 - Broken Access Control vulnerability Affected: through 2.7.3 |
| CVE-2024-39645 | 8.8 | Aug 26 | WordPress Tutor LMS plugin <= 2.7.2 - Cross Site Request Forgery (CSRF) vulnerability Affected: through 2.7.2 |
| CVE-2023-25799 | 8.8 | Jun 11 | WordPress Tutor LMS plugin <= 2.1.8 - Multiple Broken Access Control vulnerabilities Affected: through 2.1.8 |
| CVE-2024-4352 | 8.8 | May 16 | Tutor LMS Pro <= 2.7.0 - Missing Authorization to SQL Injection Affected: before 2.7.1 |
| CVE-2024-4351 | 8.8 | May 16 | Tutor LMS Pro <= 2.7.0 - Missing Authorization to Privilege Escalation Affected: before 2.7.1 |
| CVE-2024-1751 | 8.8 | Mar 13 | Tutor LMS – eLearning and online course solution <= 2.6.1 - Authenticated (Subscriber+) SQL Injection Affected: before 2.6.2 |
| CVE-2023-25800 | 8.8 | Nov 3 | WordPress Tutor LMS Plugin <= 2.2.0 is vulnerable to SQL Injection Affected: through 2.2.0 |
| CVE-2023-25990 | 8.8 | Nov 3 | WordPress Tutor LMS Plugin <= 2.1.10 is vulnerable to SQL Injection Affected: through 2.1.10 |
| CVE-2021-24184 | 8.8 | Apr 5 | Several AJAX endpoints in the Tutor LMS – eLearning and online course solution WordPress plugin before 1.7.7 were unprotected, allowing students to modify course information and… Affected: before 1.7.7 |
| CVE-2024-4222 | 8.2 | May 16 | Tutor LMS Pro <= 2.7.0 - Missing Authorization Affected: before 2.7.1 |
| CVE-2025-58993 | 7.6 | Sep 9 | WordPress Tutor LMS Plugin <= 3.7.4 - SQL Injection Vulnerability Affected: through 3.7.4 |
| CVE-2024-10400 | 7.5 | Nov 21 | Tutor LMS <= 2.7.6 - Unauthenticated SQL Injection via rating_filter Affected: through 2.7.6 |
| CVE-2023-3133 | 7.5 | Jul 4 | Tutor LMS < 2.2.1 - Unauthenticated Access to Tutor LMS Lesson Resources via REST API Affected: before 2.2.1 |
| CVE-2024-43282 | 7.2 | Aug 18 | WordPress Tutor LMS plugin <= 2.7.2 - SQL Injection vulnerability Affected: through 2.7.2 |
| CVE-2024-37266 | 7.2 | Jul 9 | WordPress Tutor LMS plugin <= 2.7.1 - Path Traversal vulnerability Affected: through 2.7.1 |
| CVE-2024-37256 | 7.2 | Jul 9 | WordPress Tutor LMS plugin <= 2.7.1 - SQL Injection vulnerability Affected: through 2.7.1 |
| CVE-2024-4902 | 7.2 | Jun 7 | Tutor LMS – eLearning and online course solution <= 2.7.1 -Authenticated (Administrator+) SQL Injection Affected: before 2.7.2 |
| CVE-2026-42702 | 7.1 | Oct 10 | WordPress Tutor LMS plugin <= 4.1.0 - Cross Site Scripting (XSS) vulnerability Affected: through 4.1.0 |
| CVE-2024-5784 | 7.1 | Aug 30 | Tutor LMS Pro <= 2.7.2 - Missing Authorization to Authenticated (Subscriber+) Insecure Direct Object Reference Affected: before 2.7.3 |
Showing 19