agentprime: tutor-lmsEvery new CVE for tutor-lms.https://agentprime.io/CVE-2026-85570: Tutor LMS 1.6.4 - 4.1.3 - Subscriber+ Quiz Answer Key Disclosurehttps://agentprime.io/advisories/CVE-2026-85570/https://agentprime.io/advisories/CVE-2026-85570/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 06:00:24 GMTCVECVE-2026-96537: Tutor LMS < 4.1.1 - Unauthenticated Tutor Page Force-Publish and Content Overwritehttps://agentprime.io/advisories/CVE-2026-96537/https://agentprime.io/advisories/CVE-2026-96537/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 06:00:14 GMTCVECVE-2026-85571: Tutor LMS 4.0.5 - 4.1.0 - Instructor+ Arbitrary Post Reparenting via IDORhttps://agentprime.io/advisories/CVE-2026-85571/https://agentprime.io/advisories/CVE-2026-85571/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 06:00:09 GMTCVECVE-2026-85572: Tutor LMS 4.0.0 - < 4.0.8 - Subscriber+ Cross-Course Lesson Comment Disclosurehttps://agentprime.io/advisories/CVE-2026-85572/https://agentprime.io/advisories/CVE-2026-85572/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 06:00:14 GMTCVECVE-2026-85569: Tutor LMS 2.7.1 - < 4.0.8 - Read-Only API Key Privilege Escalation via REST Request Misclassificationhttps://agentprime.io/advisories/CVE-2026-85569/https://agentprime.io/advisories/CVE-2026-85569/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 06:00:14 GMTCVECVE-2026-19092: Tutor LMS < 4.0.6 - Unauthenticated Arbitrary Zero-Argument Function Invocation via Template Variable Shadowinghttps://agentprime.io/advisories/CVE-2026-19092/https://agentprime.io/advisories/CVE-2026-19092/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Aug 2026 17:05:37 GMTCVEcriticalCVE-2026-19094: Tutor LMS < 4.0.6 - Unauthenticated SQLi via 'offset' and 'item_per_page' Parametershttps://agentprime.io/advisories/CVE-2026-19094/https://agentprime.io/advisories/CVE-2026-19094/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Aug 2026 06:00:19 GMTCVECVE-2026-19093: Tutor LMS < 4.0.6 - Instructor+ Arbitrary File Read via Video Pathhttps://agentprime.io/advisories/CVE-2026-19093/https://agentprime.io/advisories/CVE-2026-19093/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 22 Aug 2026 06:00:16 GMTCVECVE-2026-14187: Tutor LMS < 4.0.6 - Instructor+ Cross-Instructor Private Course Disclosure via IDORhttps://agentprime.io/advisories/CVE-2026-14187/https://agentprime.io/advisories/CVE-2026-14187/CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Sat, 22 Aug 2026 06:00:15 GMTCVECVE-2026-14306: Tutor LMS < 3.9.14 - Subscriber+ Paid Course Content Disclosure via Enrollment Check Bypasshttps://agentprime.io/advisories/CVE-2026-14306/https://agentprime.io/advisories/CVE-2026-14306/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 16:49:01 GMTCVECVE-2026-14310: Tutor LMS < 4.0.0 - Subscriber+ Cross-Course Q&A Content Disclosure and Reply Injectionhttps://agentprime.io/advisories/CVE-2026-14310/https://agentprime.io/advisories/CVE-2026-14310/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 06:00:13 GMTCVECVE-2026-12275: Tutor LMS < 3.9.13 - Subscriber+ Unauthorized Course Enrollment and Private Course Content Disclosure via Droip/Kirki Integrationhttps://agentprime.io/advisories/CVE-2026-12275/https://agentprime.io/advisories/CVE-2026-12275/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 Jul 2026 06:00:02 GMTCVECVE-2026-12274: Tutor LMS < 3.9.13 - Instructor+ Arbitrary Post Overwrite via IDORhttps://agentprime.io/advisories/CVE-2026-12274/https://agentprime.io/advisories/CVE-2026-12274/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 Jul 2026 06:00:02 GMTCVECVE-2026-12273: Tutor LMS < 3.9.13 - Subscriber+ Arbitrary Auto-Approved Comment Creationhttps://agentprime.io/advisories/CVE-2026-12273/https://agentprime.io/advisories/CVE-2026-12273/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 Jul 2026 06:00:02 GMTCVECVE-2026-12271: Tutor LMS < 3.9.13 - Subscriber+ Arbitrary Quiz Attempt Modification via IDORhttps://agentprime.io/advisories/CVE-2026-12271/https://agentprime.io/advisories/CVE-2026-12271/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 Jul 2026 06:00:01 GMTCVECVE-2023-4805: Tutor LMS < 2.3.0 - Subscriber+ Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2023-4805/https://agentprime.io/advisories/CVE-2023-4805/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 16 Oct 2023 19:39:06 GMTCVECVE-2023-3133: Tutor LMS < 2.2.1 - Unauthenticated Access to Tutor LMS Lesson Resources via REST APIhttps://agentprime.io/advisories/CVE-2023-3133/https://agentprime.io/advisories/CVE-2023-3133/Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Jul 2023 07:23:24 GMTCVECVE-2023-0236: Tutor LMS < 2.0.10 - Reflected Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2023-0236/https://agentprime.io/advisories/CVE-2023-0236/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Feb 2023 19:59:21 GMTCVE