CVE-2023-25799 Missing Authorization vulnerability in Themeum Tutor LMS.This issue affects Tutor LMS: from n/a through 2.1.8

Description

Missing Authorization vulnerability in Themeum Tutor LMS.This issue affects Tutor LMS: from n/a through 2.1.8.

Affected products and versions

Product	Affected versions	Fixed in
Tutor LMS 2.1	earliest → 2.1.8	No fix stated

Other CVEs of Tutor LMS

The 22 CVEs of Tutor LMS →

CVE-2026-111407 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Tutor… 6.5 Medium CVE-2026-42702 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Tutor… 7.1 High CVE-2026-42698 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Themeum… 5.3 Medium CVE-2026-57694 Authorization Bypass Through User-Controlled Key vulnerability in Themeum Tutor LMS tutor allows Exploiting… 6.5 Medium