Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Tutor LMS – eLearning and online course solution — Vulnerabilities & Security Advisories 54

All 54 CVE vulnerabilities found in Tutor LMS – eLearning and online course solution, with AI-generated Chinese analysis, references, and POCs.

This page aggregates vulnerability data for the product Tutor LMS, an eLearning and online course solution, focusing on specific weakness types and associated security tags. It collects a comprehensive history of security advisories, spanning from the product’s initial release through the most recent updates. Here you can track the vendor’s advisory timeline, analyze the specific classes of weaknesses affecting the platform, and review the full vulnerability history of this LMS product.

Vendor: Unknown

CVE ID Title CVSS Severity Published
CVE-2024-4902 Tutor LMS – eLearning and online course solution <= 2.7.1 -Authenticated (Administrator+) SQL Injection CWE-89 7.2 High 2024-06-07
CVE-2024-4223 Tutor LMS <= 2.7.0 - Missing Authorization CWE-862 9.8 Critical 2024-05-16
CVE-2024-4318 Tutor LMS <= 2.7.0 - Authenticated (Instructor+) SQL Injection CWE-89 8.8 High 2024-05-16
CVE-2024-4279 Tutor LMS – eLearning and online course solution <= 2.7.0 - Authenticated (Instructor+) Insecure Direct Object Reference to Arbitrary Course Deletion CWE-639 6.5 Medium 2024-05-16
CVE-2024-3553 Tutor LMS <= 2.6.2 - Missing Authorization to Unauthenticated Limited Options Update CWE-862 6.5 Medium 2024-05-02
CVE-2024-3994 Tutor LMS – eLearning and online course solution <= 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tutor_instructor_list' Shortcode CWE-79 5.4 Medium 2024-04-25
CVE-2024-1751 Tutor LMS – eLearning and online course solution <= 2.6.1 - Authenticated (Subscriber+) SQL Injection CWE-89 8.8 High 2024-03-13
CVE-2024-1502 Tutor LMS – eLearning and online course solution <= 2.6.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion CWE-862 5.4 Medium 2024-03-12
CVE-2024-1503 Tutor LMS – eLearning and online course solution <= 2.6.1 - Cross-Site Request Forgery to Plugin Deactivation and Data Erase CWE-352 4.3 Medium 2024-03-12
CVE-2024-1133 Tutor LMS <= 2.6.0 - Missing Authorization CWE-862 4.3 Medium 2024-02-20
CVE-2024-1128 Tutor LMS <= 2.6.0 - Authenticated(Student+) HTML Injection via Q&A CWE-74 5.4 Medium 2024-02-20
CVE-2023-49829 WordPress Tutor LMS Plugin <= 2.2.4 is vulnerable to Cross Site Scripting (XSS) CWE-79 5.9 Medium 2023-12-15
CVE-2022-2563 Tutor LMS < 2.0.10 - Admin+ Stored Cross-Site Scripting CWE-79 4.8 - 2022-10-17
CVE-2021-25017 Tutor LMS < 1.9.12 - Reflected Cross-Site Scripting CWE-79 6.1 - 2022-01-24
CVE-2021-24873 Tutor LMS < 1.9.11 - Reflected Cross-Site Scripting CWE-79 6.1 - 2021-11-23
CVE-2021-24740 Tutor LMS < 1.9.9 - Multiple Admin+ Stored Cross-Site Scripting CWE-79 4.8 - 2021-10-18
CVE-2021-24455 Tutor LMS < 1.9.2 - Authenticated Stored Cross-Site Scripting (XSS) CWE-79 5.4 - 2021-08-02
CVE-2021-24242 Tutor LMS < 1.8.8 - Authenticated Local File Inclusion CWE-22 5.5 - 2021-04-22
CVE-2021-24181 Tutor LMS < 1.7.7 - SQL Injection via tutor_mark_answer_as_correct CWE-89 6.5 - 2021-04-05
CVE-2021-24186 Tutor LMS < 1.8.3 - SQL Injection via tutor_answering_quiz_question/get_answer_by_id CWE-89 6.5 - 2021-04-05
CVE-2021-24185 Tutor LMS < 1.7.7 - SQL Injection via tutor_place_rating CWE-89 6.5 - 2021-04-05
CVE-2021-24184 Tutor LMS < 1.7.7 - Unprotected AJAX including Privilege Escalation CWE-862 8.8 - 2021-04-05
CVE-2021-24183 Tutor LMS < 1.8.3 - SQL Injection via tutor_quiz_builder_get_question_form CWE-89 6.5 - 2021-04-05
CVE-2021-24182 Tutor LMS < 1.8.3 - SQL Injection via tutor_quiz_builder_get_answers_by_question CWE-89 6.5 - 2021-04-05

All 54 known CVE vulnerabilities affecting Tutor LMS – eLearning and online course solution with full Chinese analysis, references, and POCs where available.