| CVE-2026-85570 |
Tutor LMS 1.6.4 - 4.1.3 - Subscriber+ Quiz Answer Key Disclosure
|
4.3
Moyenne
|
5 nov. 2026 |
| CVE-2026-96537 |
The Tutor LMS WordPress plugin before 4.1.1 does not perform a capability check in a routine that regenerates its…
|
7.5
Élevée
|
15 oct. 2026 |
| CVE-2026-85571 |
The Tutor LMS WordPress plugin before 4.1.1 does not verify that the posts named in its course content ordering…
|
6.5
Moyenne
|
10 oct. 2026 |
| CVE-2026-85569 |
The Tutor LMS WordPress plugin before 4.0.8 does not correctly determine whether an incoming request is addressed to…
|
7.2
Élevée
|
16 sept. 2026 |
| CVE-2026-85572 |
The Tutor LMS WordPress plugin before 4.0.8 does not check that a user has access to a course before returning its…
|
4.3
Moyenne
|
16 sept. 2026 |
| CVE-2026-19092 |
The Tutor LMS WordPress plugin before 4.0.6 does not prevent request data from overwriting internal variables while…
|
9.8
Critique
|
27 août 2026 |
| CVE-2026-19094 |
The Tutor LMS WordPress plugin before 4.0.6 does not validate values used to build a database query, and does not…
|
5.3
Moyenne
|
26 août 2026 |
| CVE-2026-19093 |
The Tutor LMS WordPress plugin before 4.0.6 does not validate a stored file path before using it to stream media,…
|
6.8
Moyenne
|
22 août 2026 |
| CVE-2026-14187 |
The Tutor LMS WordPress plugin before 4.0.6 does not enforce per-object ownership checks on its course content type,…
|
2.7
Faible
|
22 août 2026 |
| CVE-2026-14306 |
The Tutor LMS WordPress plugin before 3.9.14 does not properly verify enrollment when restricting access to protected…
|
4.3
Moyenne
|
6 août 2026 |
| CVE-2026-14310 |
The Tutor LMS WordPress plugin before 4.0.0 does not properly verify that a user has access to the course a Q&A…
|
5.4
Moyenne
|
30 juil. 2026 |
| CVE-2026-12274 |
The Tutor LMS WordPress plugin before 3.9.13 does not verify that the requesting user is allowed to edit a target…
|
6.5
Moyenne
|
13 juil. 2026 |
| CVE-2026-12275 |
The Tutor LMS WordPress plugin before 3.9.13 does not, in its Droip and Kirki page-builder integration, perform the…
|
7.1
Élevée
|
13 juil. 2026 |
| CVE-2026-12273 |
The Tutor LMS WordPress plugin before 3.9.13 does not perform any authorization or post-target validation before…
|
4.3
Moyenne
|
13 juil. 2026 |
| CVE-2026-12271 |
The Tutor LMS WordPress plugin before 3.9.13 does not verify ownership of the targeted quiz attempt before writing to…
|
5.4
Moyenne
|
13 juil. 2026 |
| CVE-2023-4805 |
The Tutor LMS WordPress plugin before 2.3.0 does not sanitise and escape some of its settings, which could allow users…
|
5.4
Moyenne
|
16 oct. 2023 |
| CVE-2023-3133 |
The Tutor LMS WordPress plugin before 2.2.1 does not implement adequate permission checks for REST API endpoints,…
|
Non notée
|
4 juil. 2023 |
| CVE-2023-0236 |
The Tutor LMS WordPress plugin before 2.0.10 does not sanitise and escape the reset_key and user_id parameters before…
|
6.1
Moyenne
|
6 févr. 2023 |