| CVE-2026-85570 |
Tutor LMS 1.6.4 - 4.1.3 - Subscriber+ Quiz Answer Key Disclosure
|
Not rated
|
Nov 5, 2026 |
| CVE-2026-96537 |
The Tutor LMS WordPress plugin before 4.1.1 does not perform a capability check in a routine that regenerates its…
|
7.5
High
|
Oct 15, 2026 |
| CVE-2026-85571 |
The Tutor LMS WordPress plugin before 4.1.1 does not verify that the posts named in its course content ordering…
|
6.5
Medium
|
Oct 10, 2026 |
| CVE-2026-85569 |
The Tutor LMS WordPress plugin before 4.0.8 does not correctly determine whether an incoming request is addressed to…
|
7.2
High
|
Sep 16, 2026 |
| CVE-2026-85572 |
The Tutor LMS WordPress plugin before 4.0.8 does not check that a user has access to a course before returning its…
|
4.3
Medium
|
Sep 16, 2026 |
| CVE-2026-19092 |
The Tutor LMS WordPress plugin before 4.0.6 does not prevent request data from overwriting internal variables while…
|
9.8
Critical
|
Aug 27, 2026 |
| CVE-2026-19094 |
The Tutor LMS WordPress plugin before 4.0.6 does not validate values used to build a database query, and does not…
|
5.3
Medium
|
Aug 26, 2026 |
| CVE-2026-19093 |
The Tutor LMS WordPress plugin before 4.0.6 does not validate a stored file path before using it to stream media,…
|
6.8
Medium
|
Aug 22, 2026 |
| CVE-2026-14187 |
The Tutor LMS WordPress plugin before 4.0.6 does not enforce per-object ownership checks on its course content type,…
|
2.7
Low
|
Aug 22, 2026 |
| CVE-2026-14306 |
The Tutor LMS WordPress plugin before 3.9.14 does not properly verify enrollment when restricting access to protected…
|
4.3
Medium
|
Aug 6, 2026 |
| CVE-2026-14310 |
The Tutor LMS WordPress plugin before 4.0.0 does not properly verify that a user has access to the course a Q&A…
|
5.4
Medium
|
Jul 30, 2026 |
| CVE-2026-12274 |
The Tutor LMS WordPress plugin before 3.9.13 does not verify that the requesting user is allowed to edit a target…
|
6.5
Medium
|
Jul 13, 2026 |
| CVE-2026-12275 |
The Tutor LMS WordPress plugin before 3.9.13 does not, in its Droip and Kirki page-builder integration, perform the…
|
7.1
High
|
Jul 13, 2026 |
| CVE-2026-12273 |
The Tutor LMS WordPress plugin before 3.9.13 does not perform any authorization or post-target validation before…
|
4.3
Medium
|
Jul 13, 2026 |
| CVE-2026-12271 |
The Tutor LMS WordPress plugin before 3.9.13 does not verify ownership of the targeted quiz attempt before writing to…
|
5.4
Medium
|
Jul 13, 2026 |
| CVE-2023-4805 |
The Tutor LMS WordPress plugin before 2.3.0 does not sanitise and escape some of its settings, which could allow users…
|
5.4
Medium
|
Oct 16, 2023 |
| CVE-2023-3133 |
The Tutor LMS WordPress plugin before 2.2.1 does not implement adequate permission checks for REST API endpoints,…
|
Not rated
|
Jul 4, 2023 |
| CVE-2023-0236 |
The Tutor LMS WordPress plugin before 2.0.10 does not sanitise and escape the reset_key and user_id parameters before…
|
6.1
Medium
|
Feb 6, 2023 |