| CVE-2026-111407 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Tutor…
|
6.5
Medium
|
Oct 19, 2026 |
| CVE-2026-42702 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Tutor…
|
7.1
High
|
Oct 10, 2026 |
| CVE-2026-42698 |
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Themeum…
|
5.3
Medium
|
Oct 8, 2026 |
| CVE-2026-57694 |
Authorization Bypass Through User-Controlled Key vulnerability in Themeum Tutor LMS tutor allows Exploiting…
|
6.5
Medium
|
Jul 13, 2026 |
| CVE-2026-40743 |
Unauthenticated Broken Access Control in Tutor LMS <= 3.9.7 versions
|
6.5
Medium
|
Jun 15, 2026 |
| CVE-2026-40740 |
Missing Authorization vulnerability in Themeum Tutor LMS tutor allows Exploiting Incorrectly Configured Access Control…
|
5.4
Medium
|
Apr 15, 2026 |
| CVE-2025-32223 |
Authorization Bypass Through User-Controlled Key vulnerability in Themeum Tutor LMS tutor allows Exploiting…
|
6.5
Medium
|
Mar 19, 2026 |
| CVE-2026-23799 |
Missing Authorization vulnerability in Themeum Tutor LMS tutor allows Exploiting Incorrectly Configured Access Control…
|
6.5
Medium
|
Mar 5, 2026 |
| CVE-2025-47555 |
Authorization Bypass Through User-Controlled Key vulnerability in Themeum Tutor LMS tutor allows Exploiting…
|
3.8
Low
|
Jan 22, 2026 |
| CVE-2025-58993 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor…
|
7.6
High
|
Sep 9, 2025 |
| CVE-2025-32230 |
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Themeum Tutor LMS…
|
4.3
Medium
|
Apr 10, 2025 |
| CVE-2024-43142 |
Missing Authorization vulnerability in Themeum Tutor LMS allows Exploiting Incorrectly Configured Access Control…
|
4.3
Medium
|
Nov 1, 2024 |
| CVE-2024-39645 |
Cross-Site Request Forgery (CSRF) vulnerability in Themeum Tutor LMS.This issue affects Tutor LMS: from n/a through…
|
5.4
Medium
|
Aug 26, 2024 |
| CVE-2024-43282 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor…
|
7.6
High
|
Aug 18, 2024 |
| CVE-2024-43231 |
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Themeum…
|
6.5
Medium
|
Aug 12, 2024 |
| CVE-2024-37947 |
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Themeum…
|
5.9
Medium
|
Jul 20, 2024 |
| CVE-2024-37266 |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Themeum Tutor LMS allows…
|
4.9
Medium
|
Jul 9, 2024 |
| CVE-2024-37256 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor…
|
7.6
High
|
Jul 9, 2024 |
| CVE-2023-25799 |
Missing Authorization vulnerability in Themeum Tutor LMS.This issue affects Tutor LMS: from n/a through 2.1.8
|
8.3
High
|
Jun 11, 2024 |
| CVE-2023-25700 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor…
|
8.2
High
|
Nov 3, 2023 |
| CVE-2023-25800 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor…
|
8.1
High
|
Nov 3, 2023 |
| CVE-2023-25990 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor…
|
7.1
High
|
Nov 3, 2023 |