Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Tutor LMS Pro — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in Tutor LMS Pro, with AI-generated Chinese analysis, references, and POCs.

Vendor: themeum

CVE IDTitleCVSSSeverityPublished
CVE-2026-25406 WordPress Tutor LMS Pro plugin <= 3.9.4 - Broken Authentication vulnerability CWE-288 8.1 High2026-03-25
CVE-2026-0953 Tutor LMS Pro <= 3.9.5 - Authentication Bypass via Social Login CWE-287 9.8 Critical2026-03-10
CVE-2025-6639 Tutor LMS Pro – eLearning and online course solution <= 3.8.3 - Authenticated (Subscriber+) Insecure Direct Object Reference to View/Edit Other Assignments CWE-285 5.4 Medium2025-10-25
CVE-2025-6184 Tutor LMS Pro – eLearning and online course solution <= 3.7.0 - Authenticated (Tutor Instructor+) SQL Injection CWE-89 8.8 High2025-08-13
CVE-2024-5784 Tutor LMS Pro <= 2.7.2 - Missing Authorization to Authenticated (Subscriber+) Insecure Direct Object Reference CWE-862 7.1 High2024-08-30
CVE-2024-4352 Tutor LMS Pro <= 2.7.0 - Missing Authorization to SQL Injection CWE-862 8.8 High2024-05-16
CVE-2024-4222 Tutor LMS Pro <= 2.7.0 - Missing Authorization CWE-862 7.3 High2024-05-16
CVE-2024-4351 Tutor LMS Pro <= 2.7.0 - Missing Authorization to Privilege Escalation CWE-89 8.8 High2024-05-16

All 8 known CVE vulnerabilities affecting Tutor LMS Pro with full Chinese analysis, references, and POCs where available.