Skip to content

Known vulnerabilities in Themeum tutor_lms

Is your version affected?

CVE Summary Score Published
CVE-2024-10400 The Tutor LMS plugin for WordPress is vulnerable to SQL Injection via the ‘rating_filter’ parameter in all versions up… 7.5 High Nov 21, 2024
CVE-2024-10393 The Tutor LMS plugin for WordPress is vulnerable to bypass to user registration in versions up to, and including, 2.7.6 5.3 Medium Nov 21, 2024
CVE-2024-5438 The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object… 4.3 Medium Jun 7, 2024
CVE-2024-4902 The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to time-based SQL Injection… 7.2 High Jun 7, 2024
CVE-2024-4351 The Tutor LMS Pro plugin for WordPress is vulnerable to unauthorized access of data, modification of data, loss of… 8.8 High May 16, 2024
CVE-2024-4318 The Tutor LMS plugin for WordPress is vulnerable to time-based SQL Injection via the ‘question_id’ parameter in versions… 8.8 High May 16, 2024
CVE-2024-4279 The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object… 6.5 Medium May 16, 2024
CVE-2024-3553 The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized modification… 6.5 Medium May 2, 2024
CVE-2024-1751 The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to time-based SQL Injection… 8.8 High Mar 13, 2024
CVE-2023-25700 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor… 8.2 High Nov 3, 2023
CVE-2023-25800 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor… 8.1 High Nov 3, 2023
CVE-2023-25990 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor… 7.1 High Nov 3, 2023

Other Themeum products