Unknown Tutor Lms vulnerabilities

• themeum tutor lms Tutor LMS 1.6.4 - 4.1.3 - Subscriber+ Quiz Answer Key Disclosure CVE-2026-85570 4.3 MediumNovember 5, 2026
• themeum tutor lms Tutor LMS < 4.1.1 - Unauthenticated Tutor Page Force-Publish and Content Overwrite CVE-2026-96537 7.5 HighOctober 15, 2026
• themeum tutor lms Tutor LMS 4.0.5 - 4.1.0 - Instructor+ Arbitrary Post Reparenting via IDOR CVE-2026-85571 6.5 MediumOctober 10, 2026
• themeum tutor lms Tutor LMS 4.0.0 - < 4.0.8 - Subscriber+ Cross-Course Lesson Comment Disclosure CVE-2026-85572 4.3 MediumSeptember 16, 2026
• themeum tutor lms Tutor LMS 2.7.1 - < 4.0.8 - Read-Only API Key Privilege Escalation via REST Request Misclassification CVE-2026-85569 7.2 HighSeptember 16, 2026
• themeum tutor lms Tutor LMS < 4.0.6 - Unauthenticated Arbitrary Zero-Argument Function Invocation via Template Variable Shadowing CVE-2026-19092 9.8 CriticalAugust 27, 2026
• themeum tutor lms Tutor LMS < 4.0.6 - Unauthenticated SQLi via 'offset' and 'item_per_page' Parameters CVE-2026-19094 5.3 MediumAugust 26, 2026
• themeum tutor lms Tutor LMS < 4.0.6 - Instructor+ Arbitrary File Read via Video Path CVE-2026-19093 6.8 MediumAugust 22, 2026
• themeum tutor lms Tutor LMS < 4.0.6 - Instructor+ Cross-Instructor Private Course Disclosure via IDOR CVE-2026-14187 2.7 LowAugust 22, 2026
• themeum tutor lms Tutor LMS < 3.9.14 - Subscriber+ Paid Course Content Disclosure via Enrollment Check Bypass CVE-2026-14306 4.3 MediumAugust 6, 2026
• themeum tutor lms Tutor LMS < 4.0.0 - Subscriber+ Cross-Course Q&A Content Disclosure and Reply Injection CVE-2026-14310 5.4 MediumJuly 30, 2026
• themeum tutor lms Tutor LMS < 3.9.13 - Subscriber+ Unauthorized Course Enrollment and Private Course Content Disclosure via Droip/Kirki Integration CVE-2026-12275 7.1 HighJuly 13, 2026
• themeum tutor lms Tutor LMS < 3.9.13 - Instructor+ Arbitrary Post Overwrite via IDOR CVE-2026-12274 6.5 MediumJuly 13, 2026
• themeum tutor lms Tutor LMS < 3.9.13 - Subscriber+ Arbitrary Auto-Approved Comment Creation CVE-2026-12273 4.3 MediumJuly 13, 2026
• themeum tutor lms Tutor LMS < 3.9.13 - Subscriber+ Arbitrary Quiz Attempt Modification via IDOR CVE-2026-12271 5.4 MediumJuly 13, 2026
• themeum tutor lms Tutor LMS < 2.3.0 - Subscriber+ Stored Cross-Site Scripting CVE-2023-4805 5.4 MediumOctober 16, 2023
• themeum tutor lms Tutor LMS < 2.2.1 - Unauthenticated Access to Tutor LMS Lesson Resources via REST API CVE-2023-3133 7.5 HighJuly 4, 2023
• themeum tutor lms Tutor LMS < 2.0.10 - Reflected Cross-Site Scripting CVE-2023-0236 6.1 MediumFebruary 6, 2023
• themeum tutor lms, tutor lms – elearning and online course solution +1 more Tutor LMS < 2.0.10 - Admin+ Stored Cross-Site Scripting CVE-2022-2563 4.8 MediumOctober 17, 2022
• themeum tutor lms, tutor lms – elearning and online course solution +1 more Tutor LMS < 1.9.12 - Reflected Cross-Site Scripting CVE-2021-25017 6.1 MediumJanuary 24, 2022
• themeum tutor lms, tutor lms – elearning and online course solution +1 more Tutor LMS < 1.9.11 - Reflected Cross-Site Scripting CVE-2021-24873 6.1 MediumNovember 23, 2021
• themeum tutor lms, tutor lms – elearning and online course solution +1 more Tutor LMS < 1.9.9 - Multiple Admin+ Stored Cross-Site Scripting CVE-2021-24740 4.8 MediumOctober 18, 2021
• themeum tutor lms – elearning and online course solution, tutor lms +1 more Tutor LMS < 1.9.2 - Authenticated Stored Cross-Site Scripting (XSS) CVE-2021-24455 5.4 MediumAugust 2, 2021
• themeum tutor lms – elearning and online course solution, tutor lms +1 more Tutor LMS < 1.8.3 - SQL Injection via tutor_answering_quiz_question/get_answer_by_id CVE-2021-24186 6.5 MediumApril 5, 2021
• themeum tutor lms – elearning and online course solution, tutor lms +1 more Tutor LMS < 1.7.7 - SQL Injection via tutor_place_rating CVE-2021-24185 6.5 MediumApril 5, 2021
• themeum tutor lms – elearning and online course solution, tutor lms +1 more Tutor LMS < 1.7.7 - Unprotected AJAX including Privilege Escalation CVE-2021-24184 8.8 HighApril 5, 2021
• themeum tutor lms – elearning and online course solution, tutor lms +1 more Tutor LMS < 1.8.3 - SQL Injection via tutor_quiz_builder_get_question_form CVE-2021-24183 6.5 MediumApril 5, 2021
• themeum tutor lms – elearning and online course solution, tutor lms +1 more Tutor LMS < 1.8.3 - SQL Injection via tutor_quiz_builder_get_answers_by_question CVE-2021-24182 6.5 MediumApril 5, 2021
• themeum tutor lms – elearning and online course solution, tutor lms +1 more Tutor LMS < 1.7.7 - SQL Injection via tutor_mark_answer_as_correct CVE-2021-24181 6.5 MediumApril 5, 2021