Skip to contentThemeum Tutor Lms vulnerabilities
- themeum tutor lms – elearning and online course solutionTutor LMS <= 3.9.5 - Authenticated (Subscriber+) Information Disclosure in Coupon Details via 'tutor_coupon_details' AJAX ActionCVE-2026-13715.3 Medium
- themeum tutor lms bunnynet integrationWordPress Tutor LMS BunnyNet Integration plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-245845.9 Medium
- themeum tutor lmsWordPress Tutor LMS plugin <= 3.9.4 - Insecure Direct Object References (IDOR) vulnerabilityCVE-2025-475553.8 Low
- themeum tutor lms – elearning and online course solutionTutor LMS – eLearning and online course solution <= 3.9.4 - Missing Authorization to Authenticated (Subscriber+) Limited Attachment DeletionCVE-2026-05485.4 Medium
- themeum tutor lms – elearning and online course solutionTutor LMS – eLearning and online course solution <= 3.9.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Course CompletionCVE-2025-139354.3 Medium
- themeum tutor lms – elearning and online course solutionTutor LMS – eLearning and online course solution <= 3.9.3 - Missing Authorization to Authenticated (Subscriber+) Course Enrollment BypassCVE-2025-139344.3 Medium
- themeum tutor lms – elearning and online course solutionTutor LMS – eLearning and online course solution <= 3.9.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Coupon ModificationCVE-2025-136284.3 Medium
- themeum tutor lms – elearning and online course solutionTutor LMS <= 3.9.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via tutor_order_detailsCVE-2025-136796.5 Medium
- themeum tutor lms elementor addonsWordPress Tutor LMS Elementor Addons plugin <= 3.0.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-630426.5 Medium
- themeum tutor lms proTutor LMS Pro – eLearning and online course solution <= 3.8.3 - Authenticated (Subscriber+) Insecure Direct Object Reference to View/Edit Other AssignmentsCVE-2025-66395.4 Medium
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS – eLearning and online course solution <= 3.8.3 - Missing Authorization to Unauthenticated Payment Status UpdateCVE-2025-115645.3 Medium
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS <= 3.8.3 - Missing Authorization to Sensitive Information ExposureCVE-2025-66804.3 Medium
- themeum tutor lmsWordPress Tutor LMS Plugin <= 3.7.4 - SQL Injection VulnerabilityCVE-2025-589937.6 High
- themeum tutor lms proTutor LMS Pro – eLearning and online course solution <= 3.7.0 - Authenticated (Tutor Instructor+) SQL InjectionCVE-2025-61848.8 High
- themeum tutor lmsWordPress Tutor LMS plugin <= 3.4.0 - HTML Injection vulnerabilityCVE-2025-322304.3 Medium
- themeum tutor lms elementor addonsWordPress Tutor LMS Elementor Addons plugin <= 2.1.5 - Broken Access Control vulnerabilityCVE-2024-538164.3 Medium
- themeum tutor lms, tutor lms – elearning and online course solution +1 moreTutor LMS <= 2.7.6 - Unauthenticated SQL Injection via rating_filterCVE-2024-10400Public exploitEPSS 83.1%7.5 High
- themeum tutor lms, tutor lms – elearning and online course solution +1 moreTutor LMS <= 2.7.6 - User Registration Setting Bypass to Unauthorized User RegistrationCVE-2024-103935.3 Medium
- themeum tutor lms elementor addonsTutor LMS Elementor Addons <= 2.1.5 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin InstallationCVE-2024-108974.3 Medium
- themeum tutor lmsWordPress Tutor LMS plugin <= 2.7.3 - Broken Access Control vulnerabilityCVE-2024-431424.3 Medium
- themeum tutor lms, tutor lms – elearning and online course solution +1 moreTutor LMS <= 2.7.4 - Cross-Site Request Forgery via 'addon_enable_disable'CVE-2023-29194.3 Medium
- themeum tutor lms pro, tutor lms +1 moreTutor LMS Pro <= 2.7.2 - Missing Authorization to Authenticated (Subscriber+) Insecure Direct Object ReferenceCVE-2024-57847.1 High
- themeum tutor lmsWordPress Tutor LMS plugin <= 2.7.2 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2024-396455.4 Medium
- themeum tutor lms elementor addonsTutor LMS Elementor Addons <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Course Carousel WidgetCVE-2024-55766.4 Medium
- themeum tutor lmsWordPress Tutor LMS plugin <= 2.7.2 - SQL Injection vulnerabilityCVE-2024-432827.6 High
- themeum tutor lmsWordPress Tutor LMS plugin <= 2.7.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-432316.5 Medium
- themeum tutor lms – migration tool, tutor lms - migration tool +1 moreTutor LMS – Migration Tool <= 2.2.0 - Missing Authorization in tutor_import_from_xmlCVE-2024-18044.3 Medium
- themeum tutor lms – migration tool, tutor lms - migration tool, tutorlms-migrationtool +2 moreTutor LMS – Migration Tool <= 2.2.0 - Missing Authorization in tutor_lp_export_xmlCVE-2024-17985.3 Medium
- themeum tutor lmsWordPress Tutor LMS plugin <= 2.7.2 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-379475.9 Medium
- themeum tutor lmsWordPress Tutor LMS plugin <= 2.7.1 - Path Traversal vulnerabilityCVE-2024-372664.9 Medium
- themeum tutor lmsWordPress Tutor LMS plugin <= 2.7.1 - SQL Injection vulnerabilityCVE-2024-372567.6 High
- themeum tutor lmsWordPress Tutor LMS plugin <= 2.1.8 - Multiple Broken Access Control vulnerabilitiesCVE-2023-257998.3 High
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS – eLearning and online course solution <= 2.7.1 - Authenticated (Instructor+) Insecure Direct Object Reference to Arbitrary Quiz Attempt DeletionCVE-2024-54384.3 Medium
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS – eLearning and online course solution <= 2.7.1 -Authenticated (Administrator+) SQL InjectionCVE-2024-49027.2 High
- themeum tutor lms pro, tutor lms +1 moreTutor LMS Pro <= 2.7.0 - Missing Authorization to SQL InjectionCVE-2024-43528.8 High
- themeum tutor lms pro, tutor lms +1 moreTutor LMS Pro <= 2.7.0 - Missing Authorization to Privilege EscalationCVE-2024-4351Public exploit8.8 High
- themeum tutor lms pro, tutor lms +1 moreTutor LMS Pro <= 2.7.0 - Missing AuthorizationCVE-2024-42227.3 High
- themeum tutor lms, tutor lms – elearning and online course solution +1 moreTutor LMS <= 2.7.0 - Missing AuthorizationCVE-2024-42239.8 Critical
- themeum tutor lms, tutor lms – elearning and online course solution +1 moreTutor LMS <= 2.7.0 - Authenticated (Instructor+) SQL InjectionCVE-2024-43188.8 High
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS – eLearning and online course solution <= 2.7.0 - Authenticated (Instructor+) Insecure Direct Object Reference to Arbitrary Course DeletionCVE-2024-42796.5 Medium
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS <= 2.6.2 - Missing Authorization to Unauthenticated Limited Options UpdateCVE-2024-3553Public exploit6.5 Medium
- themeum tutor lms – elearning and online course solution, tutor lms, wordpress tutor lms elearning and online course solution +2 moreTutor LMS – eLearning and online course solution <= 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tutor_instructor_list' ShortcodeCVE-2024-39945.4 Medium
- themeum tutor lms elementor addonsWordPress Tutor LMS Elementor Addons plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-299136.5 Medium
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS – eLearning and online course solution <= 2.6.1 - Authenticated (Subscriber+) SQL InjectionCVE-2024-17518.8 High
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS – eLearning and online course solution <= 2.6.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post DeletionCVE-2024-15025.4 Medium
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS – eLearning and online course solution <= 2.6.1 - Cross-Site Request Forgery to Plugin Deactivation and Data EraseCVE-2024-15034.3 Medium
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS <= 2.6.0 - Missing AuthorizationCVE-2024-11334.3 Medium
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS <= 2.6.0 - Authenticated(Student+) HTML Injection via Q&ACVE-2024-11285.4 Medium
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreWordPress Tutor LMS Plugin <= 2.2.4 is vulnerable to Cross Site Scripting (XSS)CVE-2023-498295.9 Medium
- themeum tutor lmsWordPress Tutor LMS Plugin <= 2.1.10 is vulnerable to SQL InjectionCVE-2023-257008.2 High
- Show moreLoading…