WordPress Tutor LMS <2.0.10 - Cross Site Scripting

WordPress Tutor LMS plugin before 2.0.10 contains a cross-site scripting vulnerability. The plugin does not sanitize and escape the resetkey and userid parameters before outputting then back in attributes. An attacker can inject arbitrary script in the browser of an unsuspecting user in the conte...

Tutor LMS <= 2.1.10 - SQL Injection

Tutor LMS – eLearning and online course solution plugin for WordPress all versions up to 2.6.1 contains a time-based SQL Injection caused by insufficient escaping on the questionid parameter in SQL queries, letting authenticated attackers with subscriber or higher access extract sensitive...

Tutor LMS < 4.0.6 - Unauthenticated Arbitrary PHP Function Invocation

Tutor LMS WordPress plugin 4.0.6 contains a template injection caused by insufficient prevention of request data overwriting internal variables during template rendering, letting unauthenticated attackers invoke arbitrary zero-argument PHP functions and receive their output. id: CVE-2026-19092...

CVE-2024-10400

CVE-2024-10400 WordPress 的 Tutor LMS 插件在 2.7.6 及之前的所有版本中，由于对用户提供的 'ratingfilter' 参数转义不足，且现有 SQL 查询缺乏充分的预处理，导致该插件存在 SQL 注入漏洞 versions 注意 ：该漏洞利用采用基于时间的盲注 SQL 注入检测，延迟阈值为 5 秒。如果响应时间超过 5 秒，则确认目标存在漏洞。 免责声明 ：此信息仅供教育和研究目的使用。作者不对因使用此信息而造成的任何滥用或损害负责。 使用方法 python3 CVE-2024-10400.py -u...

CVE-2026-1375

CVE-2026-1375：Tutor LMS 插件中的已认证 IDOR / 失效的访问控制 免责声明： 本仓库仅用于教育目的和道德披露 。该漏洞已负责任地向供应商报告并已修补。请勿利用此信息在未经适当授权的情况下攻击系统。 摘要 在 WordPress 的 Tutor LMS 插件（版本 = 3.9.5）中发现了不安全的直接对象引用（IDOR）/ 失效的访问控制 漏洞。该缺陷允许拥有 Tutor 讲师 角色的低权限用户执行未经授权的批量操作，例如更改其他讲师或管理员所拥有课程的状态，或将其永久删除。 通过拦截合法的后端请求并篡改课程 ID...

CVE-2024-3553

CVE-2024-3553 Tutor LMS = 2.6.2 - 缺失授权导致未经验证的有限选项更新 Tutor LMS – 适用于WordPress的在线学习和在线课程解决方案插件，在其所有版本（包括2.6.2及之前版本）中，由于hidenotices函数缺少权限检查，导致数据可被未经授权修改。这使得经过身份验证的攻击者（包括订阅者等低权限用户）能够在管理员可能已禁用的站点上启用用户注册。 详情 类型 : 插件 别名 : tutor 受影响版本 : 2.6.2 CVSS评分 : 6.5 CVSS等级 : 中等 CVSS向量 :...

CVE-2025-13673

CVE-2025-13673 — Laboratorio de Inyección SQL de Tutor LMS Inyección SQL no autenticada en el plugin de WordPress Tutor LMS = 3.9.6 mediante el parámetro couponcode. Inicio rápido 1. Clone and start the lab git clone https://github.com/dinosn/CVE-2025-13673.git cd CVE-2025-13673 ./setup.sh Deploy...

Tutor LMS <= 2.7.6 - SQL Injection

The Tutor LMS plugin for WordPress is vulnerable to SQL Injection via the ‘ratingfilter’ parameter in all versions up to, and including, 2.7.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

CVE-2026-18439

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 4.0.7 via the tutorquizbuildersave AJAX action due to missing validation that nested questionid, answerid, deletedquestionids, and...

EUVD-2026-84301

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 4.0.7 via the tutorquizbuildersave AJAX action due to missing validation that nested questionid, answerid, deletedquestionids, and...

CVE-2026-18439 Tutor LMS <= 4.0.7 - Authenticated (Custom+) Insecure Direct Object Reference to Arbitrary Quiz Question/Answer Modification and Deletion via 'payload' Parameter

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 4.0.7 via the tutorquizbuildersave AJAX action due to missing validation that nested questionid, answerid, deletedquestionids, and...

CVE-2026-18439

The Tutor LMS WordPress plugin (versions up to and including 4.0.7 ) is vulnerable to an Insecure Direct Object Reference (IDOR) via the tutor_quiz_builder_save AJAX action. The root cause is a lack of validation for nested identifiers—specifically question_id, answer_id, deleted_question_ids[], ...

CVE-2026-18439 Tutor LMS <= 4.0.7 - Authenticated (Custom+) Insecure Direct Object Reference to Arbitrary Quiz Question/Answer Modification and Deletion via 'payload' Parameter

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 4.0.7 via the tutorquizbuildersave AJAX action due to missing validation that nested questionid, answerid, deletedquestionids, and...

PT-2026-96663

Name of the Vulnerable Software and Affected Versions Tutor LMS – eLearning and online course solution plugin for WordPress versions prior to 4.0.8 Description An Insecure Direct Object Reference IDOR exists via the tutor quiz builder save AJAX action. The issue occurs because the system fails to...

CVE-2026-18439: Authorization Bypass Through User-Controlled Key

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 4.0.7 via the tutorquizbuildersave AJAX action due to missing validation that nested questionid, answerid, deletedquestionids, and...

WordPress Tutor LMS – eLearning and online course solution plugin <= 4.0.7 - Authenticated (Custom+) Insecure Direct Object Reference to Arbitrary Quiz Question/Answer Modification and Deletion vulnerability

Authenticated Custom+ Insecure Direct Object Reference to Arbitrary Quiz Question/Answer Modification and Deletion vulnerability discovered by Nakul Chodha in WordPress Plugin Tutor LMS versions = 4.0.7...

WordPress Tutor LMS plugin <= 4.0.8 - Reflected Cross-Site Scripting via 'back_url' and 'search' Parameters vulnerability

Reflected Cross-Site Scripting via 'backurl' and 'search' Parameters vulnerability discovered by Filip Kowalski Agentunio in WordPress Plugin Tutor LMS versions = 4.0.8...

CVE-2026-88944

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.0.8. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated...

CVE-2026-89081

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'search' parameter in all versions up to, and including, 4.0.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

CVE-2026-89333

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.0.8 via the 'studentid' parameter due to missing validation on a user controlled key. This makes it possible for authenticated...