Skip to content

Known vulnerabilities in Themeum Tutor LMS – eLearning and online course solution

Is your version affected?

CVE Summary Score Published
CVE-2025-13934 The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized course… 4.3 Medium Jan 9, 2026
CVE-2025-13628 The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized modification and… 4.3 Medium Jan 9, 2026
CVE-2025-13679 The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized access of data… 6.5 Medium Jan 8, 2026
CVE-2025-11564 The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized modification… 5.3 Medium Oct 25, 2025
CVE-2025-6680 The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Sensitive Information… 4.3 Medium Oct 25, 2025
CVE-2024-10400 The Tutor LMS plugin for WordPress is vulnerable to SQL Injection via the ‘rating_filter’ parameter in all versions up… 7.5 High Nov 21, 2024
CVE-2024-10393 The Tutor LMS plugin for WordPress is vulnerable to bypass to user registration in versions up to, and including, 2.7.6 5.3 Medium Nov 21, 2024
CVE-2023-2919 The Tutor LMS plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.7.4 4.3 Medium Sep 10, 2024
CVE-2024-5438 The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object… 4.3 Medium Jun 7, 2024
CVE-2024-4902 The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to time-based SQL Injection… 7.2 High Jun 7, 2024
CVE-2024-4223 The Tutor LMS plugin for WordPress is vulnerable to unauthorized access of data, modification of data, loss of data… 9.8 Critical May 16, 2024
CVE-2024-4318 The Tutor LMS plugin for WordPress is vulnerable to time-based SQL Injection via the ‘question_id’ parameter in versions… 8.8 High May 16, 2024
CVE-2024-4279 The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object… 6.5 Medium May 16, 2024
CVE-2024-3553 The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized modification… 6.5 Medium May 2, 2024
CVE-2024-3994 The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting… 5.4 Medium Apr 25, 2024
CVE-2024-1751 The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to time-based SQL Injection… 8.8 High Mar 13, 2024
CVE-2024-1502 The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized loss of data due… 5.4 Medium Mar 12, 2024
CVE-2024-1503 The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Cross-Site Request Forgery in… 4.3 Medium Mar 12, 2024
CVE-2024-1133 The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized access of… 4.3 Medium Feb 20, 2024
CVE-2024-1128 The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to HTML Injection in all… 5.4 Medium Feb 20, 2024
CVE-2023-49829 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Tutor… 5.9 Medium Dec 15, 2023
CVE-2021-24242 The Tutor LMS – eLearning and online course solution WordPress plugin before 1.8.8 is affected by a local file inclusion… Not rated Apr 22, 2021

Other Themeum products