Advisories · Technology
Themeum Tutor LMS Pro.
Every CVE that names Themeum Tutor LMS Pro among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.3 CriticalCritical · CVSS 9+
WordPress Tutor LMS Pro plugin <= 3.9.6 - SQL Injection vulnerability
- Themeum Tutor LMS Pro
- SQL injection
- CVSS 8.1 High
WordPress Tutor LMS Pro plugin <= 3.9.4 - Broken Authentication vulnerability
- Themeum Tutor LMS Pro
- Authentication bypass
- CVSS 9.8 CriticalCritical · CVSS 9+
Tutor LMS Pro <= 3.9.5 - Authentication Bypass via Social Login
- themeum Tutor LMS Pro
- Authentication bypass
- CVSS 5.4 Medium
Tutor LMS Pro – eLearning and online course solution <= 3.8.3 - Authenticated (Subscriber+) Insecure Direct Object Reference to View/Edit Other Assignments
- themeum Tutor LMS Pro
- Broken access control
- CVSS 8.8 High
Tutor LMS Pro – eLearning and online course solution <= 3.7.0 - Authenticated (Tutor Instructor+) SQL Injection
- themeum Tutor LMS Pro
- SQL injection
- CVSS 7.1 High
Tutor LMS Pro <= 2.7.2 - Missing Authorization to Authenticated (Subscriber+) Insecure Direct Object Reference
- themeum Tutor LMS Pro
- Broken access control
- CVSS 8.8 High
Tutor LMS Pro <= 2.7.0 - Missing Authorization to SQL Injection
- themeum Tutor LMS Pro
- Broken access control
- CVSS 7.3 High
Tutor LMS Pro <= 2.7.0 - Missing Authorization
- themeum Tutor LMS Pro
- Broken access control
- CVSS 8.8 High
Tutor LMS Pro <= 2.7.0 - Missing Authorization to Privilege Escalation
- themeum Tutor LMS Pro
- SQL injection