Skip to content

Known vulnerabilities in Themeum Tutor LMS – eLearning and online course solution

Is your version affected?

CVE Summary Score Published
CVE-2026-92715 The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object… 4.3 Medium Oct 17, 2026
CVE-2026-93681 The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting… 6.4 Medium Oct 16, 2026
CVE-2026-88963 The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to DOM-Based Cross-Site… 6.1 Medium Oct 16, 2026
CVE-2026-100193 The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Reflected Cross-Site… 4.7 Medium Oct 14, 2026
CVE-2026-18439 The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object… 4.3 Medium Sep 22, 2026
CVE-2026-89081 The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Reflected Cross-Site… 6.1 Medium Sep 19, 2026
CVE-2026-88944 The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to authorization bypass in all… 4.3 Medium Sep 19, 2026
CVE-2026-89333 The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object… 6.5 Medium Sep 19, 2026
CVE-2026-78175 The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to PHP Object Injection in all… 8.8 High Sep 12, 2026
CVE-2026-16759 The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Remote Code Execution limited… 6.5 Medium Aug 28, 2026
CVE-2026-15444 The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to generic SQL Injection via the… 4.9 Medium Jul 28, 2026
CVE-2026-15022 The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to generic SQL Injection via… 6.5 Medium Jul 16, 2026
CVE-2026-13443 The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting… 6.4 Medium Jul 1, 2026
CVE-2026-10736 The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to generic SQL Injection via the… 4.9 Medium Jun 18, 2026
CVE-2026-6965 The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object… 5.3 Medium May 13, 2026
CVE-2026-5502 The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized course content… 5.3 Medium Apr 17, 2026
CVE-2026-6080 The Tutor LMS plugin for WordPress is vulnerable to SQL Injection in versions up to and including 3.9.8 6.5 Medium Apr 17, 2026
CVE-2026-3371 The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object… 4.3 Medium Apr 11, 2026
CVE-2026-3358 The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized private course… 5.4 Medium Apr 11, 2026
CVE-2026-3360 The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to an Insecure Direct Object… 7.5 High Apr 10, 2026
CVE-2025-13673 The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to SQL Injection via the… 7.5 High Feb 28, 2026
CVE-2026-1371 The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Sensitive Information… 5.3 Medium Feb 3, 2026
CVE-2026-1375 The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object… 8.1 High Feb 3, 2026
CVE-2026-0548 The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized attachment… 5.4 Medium Jan 20, 2026
CVE-2025-13935 The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized course… 4.3 Medium Jan 9, 2026

Other Themeum products