Skip to contentThemeum vulnerabilities
Newest
- themeum tutor lmsWordPress Tutor LMS plugin <= 2.7.1 - SQL Injection vulnerabilityCVE-2024-372567.6 High
- themeum tutor lmsWordPress Tutor LMS plugin <= 2.1.8 - Multiple Broken Access Control vulnerabilitiesCVE-2023-257998.3 High
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS – eLearning and online course solution <= 2.7.1 - Authenticated (Instructor+) Insecure Direct Object Reference to Arbitrary Quiz Attempt DeletionCVE-2024-54384.3 Medium
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS – eLearning and online course solution <= 2.7.1 -Authenticated (Administrator+) SQL InjectionCVE-2024-49027.2 High
- themeum tutor lms pro, tutor lms +1 moreTutor LMS Pro <= 2.7.0 - Missing Authorization to SQL InjectionCVE-2024-43528.8 High
- themeum tutor lms pro, tutor lms +1 moreTutor LMS Pro <= 2.7.0 - Missing Authorization to Privilege EscalationCVE-2024-4351Public exploit8.8 High
- themeum tutor lms pro, tutor lms +1 moreTutor LMS Pro <= 2.7.0 - Missing AuthorizationCVE-2024-42227.3 High
- themeum tutor lms, tutor lms – elearning and online course solution +1 moreTutor LMS <= 2.7.0 - Missing AuthorizationCVE-2024-42239.8 Critical
- themeum tutor lms, tutor lms – elearning and online course solution +1 moreTutor LMS <= 2.7.0 - Authenticated (Instructor+) SQL InjectionCVE-2024-43188.8 High
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS – eLearning and online course solution <= 2.7.0 - Authenticated (Instructor+) Insecure Direct Object Reference to Arbitrary Course DeletionCVE-2024-42796.5 Medium
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS <= 2.6.2 - Missing Authorization to Unauthenticated Limited Options UpdateCVE-2024-3553Public exploit6.5 Medium
- themeum tutor lms – elearning and online course solution, tutor lms, wordpress tutor lms elearning and online course solution +2 moreTutor LMS – eLearning and online course solution <= 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tutor_instructor_list' ShortcodeCVE-2024-39945.4 Medium
- themeum tutor lms elementor addonsWordPress Tutor LMS Elementor Addons plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-299136.5 Medium
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS – eLearning and online course solution <= 2.6.1 - Authenticated (Subscriber+) SQL InjectionCVE-2024-17518.8 High
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS – eLearning and online course solution <= 2.6.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post DeletionCVE-2024-15025.4 Medium
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS – eLearning and online course solution <= 2.6.1 - Cross-Site Request Forgery to Plugin Deactivation and Data EraseCVE-2024-15034.3 Medium
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS <= 2.6.0 - Missing AuthorizationCVE-2024-11334.3 Medium
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS <= 2.6.0 - Authenticated(Student+) HTML Injection via Q&ACVE-2024-11285.4 Medium
- themeum qubelyQubely < 1.8.5 - Contributor+ Stored XSSCVE-2023-03765.4 Medium
- themeum wp crowdfundingWP Crowdfunding < 2.1.10 - Admin+ Stored XSSCVE-2023-61634.8 Medium
- themeum wp crowdfundingWP Crowdfunding < 2.1.9 - Reflected XSSCVE-2023-61616.1 Medium
- themeum wp crowdfundingWordPress WP Crowdfunding Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)CVE-2023-508596.5 Medium
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreWordPress Tutor LMS Plugin <= 2.2.4 is vulnerable to Cross Site Scripting (XSS)CVE-2023-498295.9 Medium
- themeum wp crowdfundingWP Crowdfunding < 2.1.8 - Admin+ Stored XSSCVE-2023-57574.8 Medium
- themeum wp crowdfundingWordPress WP Crowdfunding Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)CVE-2023-475325.8 Medium
- themeum tutor lmsWordPress Tutor LMS Plugin <= 2.1.10 is vulnerable to SQL InjectionCVE-2023-257008.2 High
- themeum tutor lmsWordPress Tutor LMS Plugin <= 2.2.0 is vulnerable to SQL InjectionCVE-2023-258008.1 High
- themeum tutor lmsWordPress Tutor LMS Plugin <= 2.1.10 is vulnerable to SQL InjectionCVE-2023-259907.1 High
- themeum tutor lmsTutor LMS < 2.3.0 - Subscriber+ Stored Cross-Site ScriptingCVE-2023-48055.4 Medium
- themeum qubelyQubely < 1.8.6 - Unauthenticated Arbitrary E-mail SendingCVE-2021-249167.5 High
- themeum tutor lmsTutor LMS < 2.2.1 - Unauthenticated Access to Tutor LMS Lesson Resources via REST APICVE-2023-31337.5 High
- themeum tutor lmsTutor LMS < 2.0.10 - Reflected Cross-Site ScriptingCVE-2023-02366.1 Medium
- themeum wp page builderWP Page Builder <= 1.2.8 - Admin+ Stored Cross-SiteCVE-2022-38304.8 Medium
- themeum wp page builder, wp page builder (wordpress plugin) +1 moreWordPress WP Page Builder plugin <= 1.2.6 - Multiple Auth. Stored Cross-Site Scripting (XSS) vulnerabilitiesCVE-2022-409634.8 Medium
- themeum tutor lms, tutor lms – elearning and online course solution +1 moreTutor LMS < 2.0.10 - Admin+ Stored Cross-Site ScriptingCVE-2022-25634.8 Medium
- themeum tutor lms, tutor lms – elearning and online course solution +1 moreTutor LMS < 1.9.12 - Reflected Cross-Site ScriptingCVE-2021-250176.1 Medium
- themeum qubely, qubely – advanced gutenberg blocks +1 moreQubely < 1.7.8 - Subscriber+ Arbitrary Post DeletionCVE-2021-250136.5 Medium
- themeum tutor lms, tutor lms – elearning and online course solution +1 moreTutor LMS < 1.9.11 - Reflected Cross-Site ScriptingCVE-2021-248736.1 Medium
- themeum tutor lms, tutor lms – elearning and online course solution +1 moreTutor LMS < 1.9.9 - Multiple Admin+ Stored Cross-Site ScriptingCVE-2021-247404.8 Medium
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS < 1.9.2 - Authenticated Stored Cross-Site Scripting (XSS)CVE-2021-244555.4 Medium
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS < 1.8.8 - Authenticated Local File InclusionCVE-2021-242423.8 Low
- themeum wp page builderWP Page Builder < 1.2.4 - Multiple Stored Cross-Site scripting (XSS)CVE-2021-242085.4 Medium
- themeum wp page builderWP Page Builder < 1.2.4 - Insecure default configuration Allows Subscribers Editing Access to PostsCVE-2021-242074.3 Medium
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS < 1.8.3 - SQL Injection via tutor_answering_quiz_question/get_answer_by_idCVE-2021-241866.5 Medium
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS < 1.7.7 - SQL Injection via tutor_place_ratingCVE-2021-241856.5 Medium
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS < 1.7.7 - Unprotected AJAX including Privilege EscalationCVE-2021-241848.8 High
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS < 1.8.3 - SQL Injection via tutor_quiz_builder_get_question_formCVE-2021-241836.5 Medium
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS < 1.8.3 - SQL Injection via tutor_quiz_builder_get_answers_by_questionCVE-2021-241826.5 Medium
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS < 1.7.7 - SQL Injection via tutor_mark_answer_as_correctCVE-2021-241816.5 Medium
- themeum tutor lmsA CSRF vulnerability in the Tutor LMS plugin before 1.5.3 for WordPress can result in an attacker...CVE-2020-8615Public exploitEPSS 10.7%6.5 Medium