Advisories · Technology

Themeum Tutor LMS.

Every CVE that names Themeum Tutor LMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-111407 CVE record

CVSS 6.5 Medium

WordPress Tutor LMS plugin <= 4.1.2 - Cross Site Scripting (XSS) vulnerability
- Themeum Tutor LMS
- Cross-site scripting (XSS)
Not analysed yet 19 Oct 2026
CVE-2026-42702 CVE record

CVSS 7.1 High

WordPress Tutor LMS plugin <= 4.1.0 - Cross Site Scripting (XSS) vulnerability
- Themeum Tutor LMS
- Cross-site scripting (XSS)
Not analysed yet 10 Oct 2026
CVE-2026-42698 CVE record

CVSS 5.3 Medium

WordPress Tutor LMS plugin <= 4.1.1 - Race Condition vulnerability
- Themeum Tutor LMS
- Race condition
Not analysed yet 8 Oct 2026
CVE-2026-57694 CVE record

CVSS 6.5 Medium

WordPress Tutor LMS plugin <= 3.9.13 - Insecure Direct Object References (IDOR) vulnerability
- Themeum Tutor LMS
- Broken access control
Not analysed yet 13 Jul 2026
CVE-2026-40743 CVE record

CVSS 6.5 Medium

WordPress Tutor LMS plugin <= 3.9.7 - Broken Access Control vulnerability
- Themeum Tutor LMS
- Broken access control
Not analysed yet 15 Jun 2026
CVE-2026-40740 CVE record

CVSS 5.4 Medium

WordPress Tutor LMS plugin <= 3.9.7 - Broken Access Control vulnerability
- Themeum Tutor LMS
- Broken access control
Not analysed yet 15 Apr 2026
CVE-2025-32223 CVE record

CVSS 6.5 Medium

WordPress Tutor LMS plugin <= 3.9.4 - Insecure Direct Object References (IDOR) vulnerability
- Themeum Tutor LMS
- Broken access control
Not analysed yet 19 Mar 2026
CVE-2026-23799 CVE record

CVSS 6.5 Medium

WordPress Tutor LMS plugin <= 3.9.5 - Broken Access Control vulnerability
- Themeum Tutor LMS
- Broken access control
Not analysed yet 5 Mar 2026
CVE-2025-47555 CVE record

CVSS 3.8 Low

WordPress Tutor LMS plugin <= 3.9.4 - Insecure Direct Object References (IDOR) vulnerability
- Themeum Tutor LMS
- Broken access control
Not analysed yet 22 Jan 2026
CVE-2025-58993 CVE record

CVSS 7.6 High

WordPress Tutor LMS Plugin <= 3.7.4 - SQL Injection Vulnerability
- Themeum Tutor LMS
- SQL injection
Not analysed yet 9 Sept 2025
CVE-2025-32230 CVE record

CVSS 4.3 Medium

WordPress Tutor LMS plugin <= 3.4.0 - HTML Injection vulnerability
- Themeum Tutor LMS
- Cross-site scripting (XSS)
Not analysed yet 10 Apr 2025
CVE-2024-43142 CVE record

CVSS 4.3 Medium

WordPress Tutor LMS plugin <= 2.7.3 - Broken Access Control vulnerability
- Themeum Tutor LMS
- Broken access control
Not analysed yet 1 Nov 2024
CVE-2024-39645 CVE record

CVSS 5.4 Medium

WordPress Tutor LMS plugin <= 2.7.2 - Cross Site Request Forgery (CSRF) vulnerability
- Themeum Tutor LMS
- Cross-site request forgery (CSRF)
Not analysed yet 26 Aug 2024
CVE-2024-43282 CVE record

CVSS 7.6 High

WordPress Tutor LMS plugin <= 2.7.2 - SQL Injection vulnerability
- Themeum Tutor LMS
- SQL injection
Not analysed yet 18 Aug 2024
CVE-2024-43231 CVE record

CVSS 6.5 Medium

WordPress Tutor LMS plugin <= 2.7.3 - Cross Site Scripting (XSS) vulnerability
- Themeum Tutor LMS
- Cross-site scripting (XSS)
Not analysed yet 12 Aug 2024
CVE-2024-37947 CVE record

CVSS 5.9 Medium

WordPress Tutor LMS plugin <= 2.7.2 - Cross Site Scripting (XSS) vulnerability
- Themeum Tutor LMS
- Cross-site scripting (XSS)
Not analysed yet 20 Jul 2024
CVE-2024-37266 CVE record

CVSS 4.9 Medium

WordPress Tutor LMS plugin <= 2.7.1 - Path Traversal vulnerability
- Themeum Tutor LMS
- Path traversal
Not analysed yet 9 Jul 2024
CVE-2024-37256 CVE record

CVSS 7.6 High

WordPress Tutor LMS plugin <= 2.7.1 - SQL Injection vulnerability
- Themeum Tutor LMS
- SQL injection
Not analysed yet 9 Jul 2024
CVE-2023-25799 CVE record

CVSS 8.3 High

WordPress Tutor LMS plugin <= 2.1.8 - Multiple Broken Access Control vulnerabilities
- Themeum Tutor LMS
- Broken access control
Not analysed yet 11 Jun 2024
CVE-2023-25700 CVE record

CVSS 8.2 High

WordPress Tutor LMS Plugin <= 2.1.10 is vulnerable to SQL Injection
- Themeum Tutor LMS
- SQL injection
Not analysed yet 3 Nov 2023
CVE-2023-25800 CVE record

CVSS 8.1 High

WordPress Tutor LMS Plugin <= 2.2.0 is vulnerable to SQL Injection
- Themeum Tutor LMS
- SQL injection
Not analysed yet 3 Nov 2023
CVE-2023-25990 CVE record

CVSS 7.1 High

WordPress Tutor LMS Plugin <= 2.1.10 is vulnerable to SQL Injection
- Themeum Tutor LMS
- SQL injection
Not analysed yet 3 Nov 2023