Skip to contentThemeum Tutor Lms – Elearning And Online Course Solution vulnerabilities
- themeum tutor lms – elearning and online course solutionTutor LMS <= 4.1.2 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Information Exposure via REST API EndpointsCVE-2026-937796.5 Medium
- themeum tutor lms – elearning and online course solutionTutor LMS <= 4.1.0 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Course Modification and Ownership Takeover via 'ID' ParameterCVE-2026-927154.3 Medium
- themeum tutor lms – elearning and online course solutionTutor LMS <= 4.1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via display_name ParameterCVE-2026-936816.4 Medium
- themeum tutor lms – elearning and online course solutionTutor LMS <= 4.0.8 - Authenticated (Subscriber+) Reflected DOM-Based Cross-Site Scripting via 'redirect_url' ParameterCVE-2026-889636.1 Medium
- themeum tutor lms – elearning and online course solutionTutor LMS <= 4.1.0 - Reflected Cross-Site Scripting via 'tab' ParameterCVE-2026-1001934.7 Medium
- themeum tutor lms – elearning and online course solutionTutor LMS <= 4.0.7 - Authenticated (Custom+) Insecure Direct Object Reference to Arbitrary Quiz Question/Answer Modification and Deletion via 'payload' ParameterCVE-2026-184394.3 Medium
- themeum tutor lms – elearning and online course solutionTutor LMS <= 4.0.8 - Reflected Cross-Site Scripting via 'back_url' and 'search' ParametersCVE-2026-890816.1 Medium
- themeum tutor lms – elearning and online course solutionTutor LMS <= 4.0.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion via 'lesson_id' ParameterCVE-2026-889444.3 Medium
- themeum tutor lms – elearning and online course solutionTutor LMS <= 4.0.8 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Information Exposure via 'student_id' ParameterCVE-2026-893336.5 Medium
- themeum tutor lms – elearning and online course solutionTutor LMS <= 4.0.7 - Authenticated (Subscriber+) PHP Object Injection to Remote Code ExecutionCVE-2026-781758.8 High
- themeum tutor lms – elearning and online course solutionTutor LMS <= 4.0.5 - Unauthenticated Remote Code Execution via 'template' and 'data' POST ParametersCVE-2026-167596.5 Medium
- themeum tutor lms – elearning and online course solutionTutor LMS <= 4.0.1 - Authenticated (Administrator+) SQL Injection via 'coupon_code' ParameterCVE-2026-154444.9 Medium
- themeum tutor lms – elearning and online course solutionTutor LMS <= 4.0.0 - Authenticated (Subscriber+) SQL Injection via Stored Quiz Answer ArrayCVE-2026-150226.5 Medium
- themeum tutor lms – elearning and online course solutionTutor LMS <= 3.9.13 - Authenticated (Author+) Stored Cross-Site Scripting via Lesson Attachment TitleCVE-2026-134436.4 Medium
- themeum tutor lms – elearning and online course solutionTutor LMS <= 3.9.11 - Authenticated (Administrator+) SQL Injection via 'data' ParameterCVE-2026-107364.9 Medium
- themeum tutor lms – elearning and online course solutionTutor LMS <= 3.9.9 - Insecure Direct Object Reference to Authenticated (Instructor+) Arbitrary Post Deletion via 'course' GET ParameterCVE-2026-69655.3 Medium
- themeum tutor lms – elearning and online course solutionTutor LMS <= 3.9.8 - Authenticated (Subscriber+) Arbitrary Course Content Manipulation via tutor_update_course_content_orderCVE-2026-55025.3 Medium
- themeum tutor lms – elearning and online course solutionTutor LMS <= 3.9.8 - Authenticated (Admin+) SQL Injection via 'date' ParameterCVE-2026-60806.5 Medium
- themeum tutor lms – elearning and online course solutionTutor LMS <= 3.9.7 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Course Content ModificationCVE-2026-33714.3 Medium
- themeum tutor lms – elearning and online course solutionTutor LMS <= 3.9.7 - Missing Authorization to Authenticated (Subscriber+) Unauthorized Private Course EnrollmentCVE-2026-33585.4 Medium
- themeum tutor lms – elearning and online course solutionTutor LMS <= 3.9.7 - Missing Authorization to Unauthenticated Arbitrary Billing Profile Overwrite via 'order_id' ParameterCVE-2026-33607.5 High
- themeum tutor lms – elearning and online course solutionTutor LMS <= 3.9.6 - Unauthenticated SQL Injection via coupon_codeCVE-2025-13673Public exploit7.5 High
- themeum tutor lms – elearning and online course solutionTutor LMS <= 3.9.5 - Insecure Direct Object Reference to Authenticated (Instructor+) Arbitrary Course Modification and DeletionCVE-2026-1375Public exploit8.1 High
- themeum tutor lms – elearning and online course solutionTutor LMS <= 3.9.5 - Authenticated (Subscriber+) Information Disclosure in Coupon Details via 'tutor_coupon_details' AJAX ActionCVE-2026-13715.3 Medium
- themeum tutor lms – elearning and online course solutionTutor LMS – eLearning and online course solution <= 3.9.4 - Missing Authorization to Authenticated (Subscriber+) Limited Attachment DeletionCVE-2026-05485.4 Medium
- themeum tutor lms – elearning and online course solutionTutor LMS – eLearning and online course solution <= 3.9.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Course CompletionCVE-2025-139354.3 Medium
- themeum tutor lms – elearning and online course solutionTutor LMS – eLearning and online course solution <= 3.9.3 - Missing Authorization to Authenticated (Subscriber+) Course Enrollment BypassCVE-2025-139344.3 Medium
- themeum tutor lms – elearning and online course solutionTutor LMS – eLearning and online course solution <= 3.9.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Coupon ModificationCVE-2025-136284.3 Medium
- themeum tutor lms – elearning and online course solutionTutor LMS <= 3.9.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via tutor_order_detailsCVE-2025-136796.5 Medium
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS – eLearning and online course solution <= 3.8.3 - Missing Authorization to Unauthenticated Payment Status UpdateCVE-2025-115645.3 Medium
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS <= 3.8.3 - Missing Authorization to Sensitive Information ExposureCVE-2025-66804.3 Medium
- themeum tutor lms, tutor lms – elearning and online course solution +1 moreTutor LMS <= 2.7.6 - Unauthenticated SQL Injection via rating_filterCVE-2024-10400Public exploitEPSS 83.1%7.5 High
- themeum tutor lms, tutor lms – elearning and online course solution +1 moreTutor LMS <= 2.7.6 - User Registration Setting Bypass to Unauthorized User RegistrationCVE-2024-103935.3 Medium
- themeum tutor lms, tutor lms – elearning and online course solution +1 moreTutor LMS <= 2.7.4 - Cross-Site Request Forgery via 'addon_enable_disable'CVE-2023-29194.3 Medium
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS – eLearning and online course solution <= 2.7.1 - Authenticated (Instructor+) Insecure Direct Object Reference to Arbitrary Quiz Attempt DeletionCVE-2024-54384.3 Medium
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS – eLearning and online course solution <= 2.7.1 -Authenticated (Administrator+) SQL InjectionCVE-2024-49027.2 High
- themeum tutor lms, tutor lms – elearning and online course solution +1 moreTutor LMS <= 2.7.0 - Missing AuthorizationCVE-2024-42239.8 Critical
- themeum tutor lms, tutor lms – elearning and online course solution +1 moreTutor LMS <= 2.7.0 - Authenticated (Instructor+) SQL InjectionCVE-2024-43188.8 High
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS – eLearning and online course solution <= 2.7.0 - Authenticated (Instructor+) Insecure Direct Object Reference to Arbitrary Course DeletionCVE-2024-42796.5 Medium
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS <= 2.6.2 - Missing Authorization to Unauthenticated Limited Options UpdateCVE-2024-3553Public exploit6.5 Medium
- themeum tutor lms – elearning and online course solution, tutor lms, wordpress tutor lms elearning and online course solution +2 moreTutor LMS – eLearning and online course solution <= 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tutor_instructor_list' ShortcodeCVE-2024-39945.4 Medium
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS – eLearning and online course solution <= 2.6.1 - Authenticated (Subscriber+) SQL InjectionCVE-2024-17518.8 High
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS – eLearning and online course solution <= 2.6.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post DeletionCVE-2024-15025.4 Medium
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS – eLearning and online course solution <= 2.6.1 - Cross-Site Request Forgery to Plugin Deactivation and Data EraseCVE-2024-15034.3 Medium
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS <= 2.6.0 - Missing AuthorizationCVE-2024-11334.3 Medium
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS <= 2.6.0 - Authenticated(Student+) HTML Injection via Q&ACVE-2024-11285.4 Medium
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreWordPress Tutor LMS Plugin <= 2.2.4 is vulnerable to Cross Site Scripting (XSS)CVE-2023-498295.9 Medium
- themeum tutor lms, tutor lms – elearning and online course solution +1 moreTutor LMS < 2.0.10 - Admin+ Stored Cross-Site ScriptingCVE-2022-25634.8 Medium
- themeum tutor lms, tutor lms – elearning and online course solution +1 moreTutor LMS < 1.9.12 - Reflected Cross-Site ScriptingCVE-2021-250176.1 Medium
- themeum tutor lms, tutor lms – elearning and online course solution +1 moreTutor LMS < 1.9.11 - Reflected Cross-Site ScriptingCVE-2021-248736.1 Medium
- Show moreLoading…