Tutor LMS Elementor Addons — Vulnerabilities & Security Advisories 6

All 6 CVE vulnerabilities found in Tutor LMS Elementor Addons, with AI-generated Chinese analysis, references, and POCs.

Vendor: Themeum

CVE ID	Title	CVSS	Severity	Published
CVE-2026-1372	Tutor LMS Elementor Addons <= 4.0.0 - Missing Authorization to Authenticated (Subscriber+) Tutor LMS and Elementor Plugin Activation CWE-862	4.3	Medium	2026-07-21
CVE-2025-63042	WordPress Tutor LMS Elementor Addons plugin <= 3.0.1 - Cross Site Scripting (XSS) vulnerability CWE-79	6.5	Medium	2025-12-09
CVE-2024-53816	WordPress Tutor LMS Elementor Addons plugin <= 2.1.5 - Broken Access Control vulnerability CWE-862	4.3	Medium	2024-12-09
CVE-2024-10897	Tutor LMS Elementor Addons <= 2.1.5 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Installation CWE-862	4.3	Medium	2024-11-15
CVE-2024-5576	Tutor LMS Elementor Addons <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Course Carousel Widget CWE-79	6.4	Medium	2024-08-20
CVE-2024-29913	WordPress Tutor LMS Elementor Addons plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability CWE-79	6.5	Medium	2024-03-27

All 6 known CVE vulnerabilities affecting Tutor LMS Elementor Addons with full Chinese analysis, references, and POCs where available.