| CVE-2026-111407 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Tutor…
|
6.5
Moyenne
|
19 oct. 2026 |
| CVE-2026-42702 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Tutor…
|
7.1
Élevée
|
10 oct. 2026 |
| CVE-2026-42698 |
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Themeum…
|
5.3
Moyenne
|
8 oct. 2026 |
| CVE-2026-57694 |
Authorization Bypass Through User-Controlled Key vulnerability in Themeum Tutor LMS tutor allows Exploiting…
|
6.5
Moyenne
|
13 juil. 2026 |
| CVE-2026-40743 |
Unauthenticated Broken Access Control in Tutor LMS <= 3.9.7 versions
|
6.5
Moyenne
|
15 juin 2026 |
| CVE-2026-40740 |
Missing Authorization vulnerability in Themeum Tutor LMS tutor allows Exploiting Incorrectly Configured Access Control…
|
5.4
Moyenne
|
15 avr. 2026 |
| CVE-2025-32223 |
Authorization Bypass Through User-Controlled Key vulnerability in Themeum Tutor LMS tutor allows Exploiting…
|
6.5
Moyenne
|
19 mars 2026 |
| CVE-2026-23799 |
Missing Authorization vulnerability in Themeum Tutor LMS tutor allows Exploiting Incorrectly Configured Access Control…
|
6.5
Moyenne
|
5 mars 2026 |
| CVE-2025-47555 |
Authorization Bypass Through User-Controlled Key vulnerability in Themeum Tutor LMS tutor allows Exploiting…
|
3.8
Faible
|
22 janv. 2026 |
| CVE-2025-58993 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor…
|
7.6
Élevée
|
9 sept. 2025 |
| CVE-2025-32230 |
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Themeum Tutor LMS…
|
4.3
Moyenne
|
10 avr. 2025 |
| CVE-2024-43142 |
Missing Authorization vulnerability in Themeum Tutor LMS allows Exploiting Incorrectly Configured Access Control…
|
4.3
Moyenne
|
1 nov. 2024 |
| CVE-2024-39645 |
Cross-Site Request Forgery (CSRF) vulnerability in Themeum Tutor LMS.This issue affects Tutor LMS: from n/a through…
|
5.4
Moyenne
|
26 août 2024 |
| CVE-2024-43282 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor…
|
7.6
Élevée
|
18 août 2024 |
| CVE-2024-43231 |
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Themeum…
|
6.5
Moyenne
|
12 août 2024 |
| CVE-2024-37947 |
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Themeum…
|
5.9
Moyenne
|
20 juil. 2024 |
| CVE-2024-37266 |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Themeum Tutor LMS allows…
|
4.9
Moyenne
|
9 juil. 2024 |
| CVE-2024-37256 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor…
|
7.6
Élevée
|
9 juil. 2024 |
| CVE-2023-25799 |
Missing Authorization vulnerability in Themeum Tutor LMS.This issue affects Tutor LMS: from n/a through 2.1.8
|
8.3
Élevée
|
11 juin 2024 |
| CVE-2023-25700 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor…
|
8.2
Élevée
|
3 nov. 2023 |
| CVE-2023-25800 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor…
|
8.1
Élevée
|
3 nov. 2023 |
| CVE-2023-25990 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor…
|
7.1
Élevée
|
3 nov. 2023 |