7.6
High
CVE-2025-58993 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor LMS tutor allows SQL Injection.This issue affects Tutor LMS: from n/a through <= 3.7.4.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Tutor LMS 3.7 | earliest → 3.7.4 | No fix stated |
Other CVEs of Tutor LMS
The 22 CVEs of Tutor LMS →
CVE-2026-111407
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Tutor…
6.5
Medium
CVE-2026-42702
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Tutor…
7.1
High
CVE-2026-42698
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Themeum…
5.3
Medium
CVE-2026-57694
Authorization Bypass Through User-Controlled Key vulnerability in Themeum Tutor LMS tutor allows Exploiting…
6.5
Medium