Tutor LMS
- Software type
- WordPress plugin
- Total vulnerabilities (90 days)
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 11/07/2026, Tutor LMS recorded 3 security vulnerabilities in the last 90 days, of which 1 is rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Tutor LMS and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-111407WordPress Tutor LMS plugin <= 4.1.2 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-42702WordPress Tutor LMS plugin <= 4.1.0 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-42698WordPress Tutor LMS plugin <= 4.1.1 - Race Condition vulnerabilityCVE-2026-57694WordPress Tutor LMS plugin <= 3.9.13 - Insecure Direct Object References (IDOR) vulnerabilityCVE-2026-40743WordPress Tutor LMS plugin <= 3.9.7 - Broken Access Control vulnerability| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-111407WordPress Tutor LMS plugin <= 4.1.2 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes |
| SeverityMedium |
CVE-2026-42702WordPress Tutor LMS plugin <= 4.1.0 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Published10/10/2026 | SeverityHigh |
|---|
CVE-2026-42698WordPress Tutor LMS plugin <= 4.1.1 - Race Condition vulnerability | Exploitation statusNot exploited | FixYes | Published10/08/2026 | SeverityMedium |
|---|
CVE-2026-57694WordPress Tutor LMS plugin <= 3.9.13 - Insecure Direct Object References (IDOR) vulnerability | Exploitation statusNot exploited | FixYes | Published07/13/2026 | SeverityMedium |
|---|
CVE-2026-40743WordPress Tutor LMS plugin <= 3.9.7 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Published06/15/2026 | SeverityMedium |
|---|
CVE-2026-40740WordPress Tutor LMS plugin <= 3.9.7 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Published04/15/2026 | SeverityMedium |
|---|
CVE-2025-32223WordPress Tutor LMS plugin <= 3.9.4 - Insecure Direct Object References (IDOR) vulnerability | Exploitation statusNot exploited | FixYes | Published03/19/2026 | SeverityMedium |
|---|
CVE-2026-23799WordPress Tutor LMS plugin <= 3.9.5 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Published03/05/2026 | SeverityMedium |
|---|
CVE-2025-47555WordPress Tutor LMS plugin <= 3.9.4 - Insecure Direct Object References (IDOR) vulnerability | Exploitation statusNot exploited | FixYes | Published01/22/2026 | SeverityLow |
|---|
CVE-2025-58993WordPress Tutor LMS Plugin <= 3.7.4 - SQL Injection Vulnerability | Exploitation statusNot exploited | FixYes | Published09/09/2025 | SeverityHigh |
|---|
CVE-2025-32230WordPress Tutor LMS plugin <= 3.4.0 - HTML Injection vulnerability | Exploitation statusNot exploited | FixYes | Published04/10/2025 | SeverityMedium |
|---|
CVE-2024-43142WordPress Tutor LMS plugin <= 2.7.3 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Published11/01/2024 | SeverityMedium |
|---|
CVE-2024-39645WordPress Tutor LMS plugin <= 2.7.2 - Cross Site Request Forgery (CSRF) vulnerability | Exploitation statusNot exploited | FixYes | Published08/26/2024 | SeverityMedium |
|---|
CVE-2024-43282WordPress Tutor LMS plugin <= 2.7.2 - SQL Injection vulnerability | Exploitation statusNot exploited | FixYes | Published08/18/2024 | SeverityHigh |
|---|
CVE-2024-43231WordPress Tutor LMS plugin <= 2.7.3 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Published08/12/2024 | SeverityMedium |
|---|
CVE-2024-37947WordPress Tutor LMS plugin <= 2.7.2 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Published07/20/2024 | SeverityMedium |
|---|
CVE-2024-37266WordPress Tutor LMS plugin <= 2.7.1 - Path Traversal vulnerability | Exploitation statusNot exploited | FixYes | Published07/09/2024 | SeverityMedium |
|---|
CVE-2024-37256WordPress Tutor LMS plugin <= 2.7.1 - SQL Injection vulnerability | Exploitation statusNot exploited | FixYes | Published07/09/2024 | SeverityHigh |
|---|
CVE-2023-25799WordPress Tutor LMS plugin <= 2.1.8 - Multiple Broken Access Control vulnerabilities | Exploitation statusNot exploited | FixYes | Published06/11/2024 | SeverityHigh |
|---|
CVE-2023-25990WordPress Tutor LMS Plugin <= 2.1.10 is vulnerable to SQL Injection | Exploitation statusNot exploited | FixYes | Published11/03/2023 | SeverityHigh |
|---|
CVE-2023-25800WordPress Tutor LMS Plugin <= 2.2.0 is vulnerable to SQL Injection | Exploitation statusNot exploited | FixYes | Published11/03/2023 | SeverityHigh |
|---|
CVE-2023-25700WordPress Tutor LMS Plugin <= 2.1.10 is vulnerable to SQL Injection | Exploitation statusNot exploited | FixYes | Published11/03/2023 | SeverityCritical |
|---|
22 Results | Page 1 of 1