MINI-H86Q-VM4J-37G7

Bulletin has no description...

MINI-RXH2-988H-PM27

Bulletin has no description...

MINI-RGGP-X7MQ-J6J3

Bulletin has no description...

MINI-2MP2-W89H-W959

Bulletin has no description...

MINI-GCV8-V5CH-W3Q9

Bulletin has no description...

MINI-Q3XX-G95G-856Q

Bulletin has no description...

MINI-QMX4-G36X-FPJM

Bulletin has no description...

MINI-GQMP-W7PQ-VG82

Bulletin has no description...

MINI-FWR3-8M93-W8FF

Bulletin has no description...

MINI-FH5W-9WCH-J462

Bulletin has no description...

MINI-856C-WX2J-HQQX

Bulletin has no description...

MINI-2R77-MWJ5-RHRQ

Bulletin has no description...

MINI-QXRC-WGQW-V799

Bulletin has no description...

MINI-5R92-3M6R-26MR

Bulletin has no description...

CVE-2026-3371

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.9.7. This is due to missing authorization checks in the savecoursecontentorder private method, which is called unconditionally by the...

CVE-2026-3371

The Tutor LMS WordPress plugin (versions ≤ 3.9.7) is vulnerable to Insecure Direct Object Reference due to missing authorization checks in the private save_course_content_order() method, which is called unconditionally by the tutor_update_course_content_order AJAX handler. Attackers with Subscrib...

CVE-2026-3371

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.9.7. This is due to missing authorization checks in the savecoursecontentorder private method, which is called unconditionally by the...

EUVD-2026-21615

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.9.7. This is due to missing authorization checks in the savecoursecontentorder private method, which is called unconditionally by the...

CVE-2026-3371 Tutor LMS <= 3.9.7 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Course Content Modification

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.9.7. This is due to missing authorization checks in the savecoursecontentorder private method, which is called unconditionally by the...

PT-2026-32085

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.9.7. This is due to missing authorization checks in the save course content order private method, which is called unconditionally by...