Unknown Tutor LMS vulnerabilities

CVEs per yearBy the year they were published

1. 20233
2. 202615

Newest CVEs

• CVE-2026-85570

  Tutor LMS 1.6.4 - 4.1.3 - Subscriber+ Quiz Answer Key Disclosure

  Unknown · Tutor LMS

  Not scored
• CVE-2026-96537

  Tutor LMS < 4.1.1 - Unauthenticated Tutor Page Force-Publish and Content Overwrite

  Unknown · Tutor LMS

  High7.5
• CVE-2026-85571

  Tutor LMS 4.0.5 - 4.1.0 - Instructor+ Arbitrary Post Reparenting via IDOR

  Unknown · Tutor LMS

  Medium6.5
• CVE-2026-85572

  Tutor LMS 4.0.0 - < 4.0.8 - Subscriber+ Cross-Course Lesson Comment Disclosure

  Unknown · Tutor LMS

  Medium4.3
• CVE-2026-85569

  Tutor LMS 2.7.1 - < 4.0.8 - Read-Only API Key Privilege Escalation via REST Request Misclassification

  Unknown · Tutor LMS

  High7.2
• CVE-2026-19092

  Tutor LMS < 4.0.6 - Unauthenticated Arbitrary Zero-Argument Function Invocation via Template Variable Shadowing

  Unknown · Tutor LMS

  Critical9.8
• CVE-2026-19094

  Tutor LMS < 4.0.6 - Unauthenticated SQLi via 'offset' and 'item_per_page' Parameters

  Unknown · Tutor LMS

  Medium5.3
• CVE-2026-19093

  Tutor LMS < 4.0.6 - Instructor+ Arbitrary File Read via Video Path

  Unknown · Tutor LMS

  Medium6.8
• CVE-2026-14187

  Tutor LMS < 4.0.6 - Instructor+ Cross-Instructor Private Course Disclosure via IDOR

  Unknown · Tutor LMS

  Low2.7
• CVE-2026-14306

  Tutor LMS < 3.9.14 - Subscriber+ Paid Course Content Disclosure via Enrollment Check Bypass

  Unknown · Tutor LMS

  Medium4.3