themeum Tutor LMS Pro vulnerabilities

CVEs per yearBy the year they were published

1. 20244
2. 20252
3. 20263

Newest CVEs

• CVE-2026-22332

  WordPress Tutor LMS Pro plugin <= 3.9.6 - SQL Injection vulnerability

  Themeum · Tutor LMS Pro

  Critical9.3
• CVE-2026-25406

  WordPress Tutor LMS Pro plugin <= 3.9.4 - Broken Authentication vulnerability

  Themeum · Tutor LMS Pro

  High8.1
• CVE-2026-0953

  Tutor LMS Pro <= 3.9.5 - Authentication Bypass via Social Login

  themeum · Tutor LMS Pro

  Critical9.8
• CVE-2025-6639

  Tutor LMS Pro – eLearning and online course solution <= 3.8.3 - Authenticated (Subscriber+) Insecure Direct Object Reference to View/Edit Other Assignments

  themeum · Tutor LMS Pro

  Medium5.4
• CVE-2025-6184

  Tutor LMS Pro – eLearning and online course solution <= 3.7.0 - Authenticated (Tutor Instructor+) SQL Injection

  themeum · Tutor LMS Pro

  High8.8
• CVE-2024-5784

  Tutor LMS Pro <= 2.7.2 - Missing Authorization to Authenticated (Subscriber+) Insecure Direct Object Reference

  themeum · Tutor LMS Pro

  High7.1
• CVE-2024-4352

  Tutor LMS Pro <= 2.7.0 - Missing Authorization to SQL Injection

  themeum · Tutor LMS Pro

  High8.8
• CVE-2024-4222

  Tutor LMS Pro <= 2.7.0 - Missing Authorization

  themeum · Tutor LMS Pro

  High7.3
• CVE-2024-4351

  Tutor LMS Pro <= 2.7.0 - Missing Authorization to Privilege Escalation

  themeum · Tutor LMS Pro

  High8.8