Themeum Tutor Lms vulnerabilities

• themeum tutor lms – elearning and online course solution, tutor lms +1 more Tutor LMS – eLearning and online course solution <= 3.8.3 - Missing Authorization to Unauthenticated Payment Status Update CVE-2025-11564 5.3 MediumOctober 25, 2025
• themeum tutor lms – elearning and online course solution, tutor lms +1 more Tutor LMS <= 3.8.3 - Missing Authorization to Sensitive Information Exposure CVE-2025-6680 4.3 MediumOctober 25, 2025
• themeum tutor lms elementor addons WordPress Tutor LMS Elementor Addons plugin <= 2.1.5 - Broken Access Control vulnerability CVE-2024-53816 4.3 MediumDecember 9, 2024
• themeum tutor lms, tutor lms – elearning and online course solution +1 more Tutor LMS <= 2.7.6 - Unauthenticated SQL Injection via rating_filter CVE-2024-10400 Public exploit EPSS 83.1% 7.5 HighNovember 21, 2024
• themeum tutor lms, tutor lms – elearning and online course solution +1 more Tutor LMS <= 2.7.6 - User Registration Setting Bypass to Unauthorized User Registration CVE-2024-10393 5.3 MediumNovember 21, 2024
• themeum tutor lms elementor addons Tutor LMS Elementor Addons <= 2.1.5 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Installation CVE-2024-10897 4.3 MediumNovember 15, 2024
• themeum tutor lms WordPress Tutor LMS plugin <= 2.7.3 - Broken Access Control vulnerability CVE-2024-43142 4.3 MediumNovember 1, 2024
• themeum tutor lms, tutor lms – elearning and online course solution +1 more Tutor LMS <= 2.7.4 - Cross-Site Request Forgery via 'addon_enable_disable' CVE-2023-2919 4.3 MediumSeptember 10, 2024
• themeum tutor lms pro, tutor lms +1 more Tutor LMS Pro <= 2.7.2 - Missing Authorization to Authenticated (Subscriber+) Insecure Direct Object Reference CVE-2024-5784 7.1 HighAugust 30, 2024
• themeum tutor lms WordPress Tutor LMS plugin <= 2.7.2 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-39645 5.4 MediumAugust 26, 2024
• themeum tutor lms elementor addons Tutor LMS Elementor Addons <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Course Carousel Widget CVE-2024-5576 6.4 MediumAugust 20, 2024
• themeum tutor lms WordPress Tutor LMS plugin <= 2.7.2 - SQL Injection vulnerability CVE-2024-43282 7.6 HighAugust 18, 2024
• themeum tutor lms WordPress Tutor LMS plugin <= 2.7.3 - Cross Site Scripting (XSS) vulnerability CVE-2024-43231 6.5 MediumAugust 12, 2024
• themeum tutor lms – migration tool, tutor lms - migration tool +1 more Tutor LMS – Migration Tool <= 2.2.0 - Missing Authorization in tutor_import_from_xml CVE-2024-1804 4.3 MediumJuly 27, 2024
• themeum tutor lms – migration tool, tutor lms - migration tool, tutorlms-migrationtool +2 more Tutor LMS – Migration Tool <= 2.2.0 - Missing Authorization in tutor_lp_export_xml CVE-2024-1798 5.3 MediumJuly 27, 2024
• themeum tutor lms WordPress Tutor LMS plugin <= 2.7.2 - Cross Site Scripting (XSS) vulnerability CVE-2024-37947 5.9 MediumJuly 20, 2024
• themeum tutor lms WordPress Tutor LMS plugin <= 2.7.1 - Path Traversal vulnerability CVE-2024-37266 4.9 MediumJuly 9, 2024
• themeum tutor lms WordPress Tutor LMS plugin <= 2.7.1 - SQL Injection vulnerability CVE-2024-37256 7.6 HighJuly 9, 2024
• themeum tutor lms WordPress Tutor LMS plugin <= 2.1.8 - Multiple Broken Access Control vulnerabilities CVE-2023-25799 8.3 HighJune 11, 2024
• themeum tutor lms – elearning and online course solution, tutor lms +1 more Tutor LMS – eLearning and online course solution <= 2.7.1 - Authenticated (Instructor+) Insecure Direct Object Reference to Arbitrary Quiz Attempt Deletion CVE-2024-5438 4.3 MediumJune 7, 2024
• themeum tutor lms – elearning and online course solution, tutor lms +1 more Tutor LMS – eLearning and online course solution <= 2.7.1 -Authenticated (Administrator+) SQL Injection CVE-2024-4902 7.2 HighJune 7, 2024
• themeum tutor lms pro, tutor lms +1 more Tutor LMS Pro <= 2.7.0 - Missing Authorization to SQL Injection CVE-2024-4352 8.8 HighMay 16, 2024
• themeum tutor lms pro, tutor lms +1 more Tutor LMS Pro <= 2.7.0 - Missing Authorization to Privilege Escalation CVE-2024-4351 Public exploit 8.8 HighMay 16, 2024
• themeum tutor lms pro, tutor lms +1 more Tutor LMS Pro <= 2.7.0 - Missing Authorization CVE-2024-4222 7.3 HighMay 16, 2024
• themeum tutor lms, tutor lms – elearning and online course solution +1 more Tutor LMS <= 2.7.0 - Missing Authorization CVE-2024-4223 9.8 CriticalMay 16, 2024
• themeum tutor lms, tutor lms – elearning and online course solution +1 more Tutor LMS <= 2.7.0 - Authenticated (Instructor+) SQL Injection CVE-2024-4318 8.8 HighMay 16, 2024
• themeum tutor lms – elearning and online course solution, tutor lms +1 more Tutor LMS – eLearning and online course solution <= 2.7.0 - Authenticated (Instructor+) Insecure Direct Object Reference to Arbitrary Course Deletion CVE-2024-4279 6.5 MediumMay 16, 2024
• themeum tutor lms – elearning and online course solution, tutor lms +1 more Tutor LMS <= 2.6.2 - Missing Authorization to Unauthenticated Limited Options Update CVE-2024-3553 Public exploit 6.5 MediumMay 2, 2024
• themeum tutor lms – elearning and online course solution, tutor lms, wordpress tutor lms elearning and online course solution +2 more Tutor LMS – eLearning and online course solution <= 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tutor_instructor_list' Shortcode CVE-2024-3994 5.4 MediumApril 25, 2024
• themeum tutor lms elementor addons WordPress Tutor LMS Elementor Addons plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability CVE-2024-29913 6.5 MediumMarch 27, 2024
• themeum tutor lms – elearning and online course solution, tutor lms +1 more Tutor LMS – eLearning and online course solution <= 2.6.1 - Authenticated (Subscriber+) SQL Injection CVE-2024-1751 8.8 HighMarch 13, 2024
• themeum tutor lms – elearning and online course solution, tutor lms +1 more Tutor LMS – eLearning and online course solution <= 2.6.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion CVE-2024-1502 5.4 MediumMarch 12, 2024
• themeum tutor lms – elearning and online course solution, tutor lms +1 more Tutor LMS – eLearning and online course solution <= 2.6.1 - Cross-Site Request Forgery to Plugin Deactivation and Data Erase CVE-2024-1503 4.3 MediumMarch 12, 2024
• themeum tutor lms – elearning and online course solution, tutor lms +1 more Tutor LMS <= 2.6.0 - Missing Authorization CVE-2024-1133 4.3 MediumFebruary 20, 2024
• themeum tutor lms – elearning and online course solution, tutor lms +1 more Tutor LMS <= 2.6.0 - Authenticated(Student+) HTML Injection via Q&A CVE-2024-1128 5.4 MediumFebruary 20, 2024
• themeum tutor lms – elearning and online course solution, tutor lms +1 more WordPress Tutor LMS Plugin <= 2.2.4 is vulnerable to Cross Site Scripting (XSS) CVE-2023-49829 5.9 MediumDecember 15, 2023
• themeum tutor lms WordPress Tutor LMS Plugin <= 2.1.10 is vulnerable to SQL Injection CVE-2023-25700 8.2 HighNovember 3, 2023
• themeum tutor lms WordPress Tutor LMS Plugin <= 2.2.0 is vulnerable to SQL Injection CVE-2023-25800 8.1 HighNovember 3, 2023
• themeum tutor lms WordPress Tutor LMS Plugin <= 2.1.10 is vulnerable to SQL Injection CVE-2023-25990 7.1 HighNovember 3, 2023
• themeum tutor lms Tutor LMS < 2.3.0 - Subscriber+ Stored Cross-Site Scripting CVE-2023-4805 5.4 MediumOctober 16, 2023
• themeum tutor lms Tutor LMS < 2.2.1 - Unauthenticated Access to Tutor LMS Lesson Resources via REST API CVE-2023-3133 7.5 HighJuly 4, 2023
• themeum tutor lms Tutor LMS < 2.0.10 - Reflected Cross-Site Scripting CVE-2023-0236 6.1 MediumFebruary 6, 2023
• themeum tutor lms, tutor lms – elearning and online course solution +1 more Tutor LMS < 2.0.10 - Admin+ Stored Cross-Site Scripting CVE-2022-2563 4.8 MediumOctober 17, 2022
• themeum tutor lms, tutor lms – elearning and online course solution +1 more Tutor LMS < 1.9.12 - Reflected Cross-Site Scripting CVE-2021-25017 6.1 MediumJanuary 24, 2022
• themeum tutor lms, tutor lms – elearning and online course solution +1 more Tutor LMS < 1.9.11 - Reflected Cross-Site Scripting CVE-2021-24873 6.1 MediumNovember 23, 2021
• themeum tutor lms, tutor lms – elearning and online course solution +1 more Tutor LMS < 1.9.9 - Multiple Admin+ Stored Cross-Site Scripting CVE-2021-24740 4.8 MediumOctober 18, 2021
• themeum tutor lms – elearning and online course solution, tutor lms +1 more Tutor LMS < 1.9.2 - Authenticated Stored Cross-Site Scripting (XSS) CVE-2021-24455 5.4 MediumAugust 2, 2021
• themeum tutor lms – elearning and online course solution, tutor lms +1 more Tutor LMS < 1.8.8 - Authenticated Local File Inclusion CVE-2021-24242 3.8 LowApril 22, 2021
• themeum tutor lms – elearning and online course solution, tutor lms +1 more Tutor LMS < 1.8.3 - SQL Injection via tutor_answering_quiz_question/get_answer_by_id CVE-2021-24186 6.5 MediumApril 5, 2021
• themeum tutor lms – elearning and online course solution, tutor lms +1 more Tutor LMS < 1.7.7 - SQL Injection via tutor_place_rating CVE-2021-24185 6.5 MediumApril 5, 2021
• Show olderLoading…