Lucene search
+L

131 matches found

NVD
NVD
•added 2026/10/19 10:16 a.m.•24 views

CVE-2026-111407

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeum Tutor LMS tutor allows Stored XSS.This issue affects Tutor LMS: from n/a through 4.1.2...

6.5CVSS0.00156EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/19 9:09 a.m.•15 views

CVE-2026-111407 WordPress Tutor LMS plugin <= 4.1.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeum Tutor LMS tutor allows Stored XSS.This issue affects Tutor LMS: from n/a through 4.1.2...

6.5CVSS5.8AI score0.00156EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/19 9:09 a.m.•45 views

CVE-2026-111407

The Tutor LMS WordPress plugin (versions

6.5CVSS5.8AI score0.00156EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/19 9:09 a.m.•51 views

CVE-2026-111407 WordPress Tutor LMS plugin <= 4.1.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeum Tutor LMS tutor allows Stored XSS.This issue affects Tutor LMS: from n/a through 4.1.2...

6.5CVSS0.00156EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/19 9:09 a.m.•22 views

EUVD-2026-104134

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeum Tutor LMS tutor allows Stored XSS.This issue affects Tutor LMS: from n/a through 4.1.2...

6.5CVSS5.8AI score0.00156EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/19 12:00 a.m.•24 views

PT-2026-117301

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeum Tutor LMS tutor allows Stored XSS.This issue affects Tutor LMS: from n/a through 4.1.2...

6.5CVSS5.8AI score0.00156EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/19 12:00 a.m.•17 views

CVE-2026-111407: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeum Tutor LMS tutor allows Stored XSS.This issue affects Tutor LMS: from n/a through 4.1.2...

6.5CVSS5.8AI score0.00156EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/10/18 4:00 p.m.•24 views

Themeum Tutor LMS – eLearning and online course solution, cross-site scripting vulnerabilities

Themeum Tutor LMS – eLearning and online course solutions versions 4.1.2 and earlier have a cross-site scripting vulnerability. This vulnerability arises from improper input during web page generation, making it susceptible to stored-xss attacks...

6.5CVSS5.5AI score0.00156EPSS
SaveExploits0References2
NVD
NVD
•added 2026/10/08 2:16 p.m.•12 views

CVE-2026-42698

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Themeum Tutor LMS tutor allows Leveraging Race Conditions.This issue affects Tutor LMS: from n/a through 4.1.1...

5.3CVSS0.00167EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/08 1:14 p.m.•14 views

EUVD-2026-94960

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Themeum Tutor LMS tutor allows Leveraging Race Conditions.This issue affects Tutor LMS: from n/a through 4.1.1...

5.3CVSS5.7AI score0.00167EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/08 1:14 p.m.•45 views

CVE-2026-42698 WordPress Tutor LMS plugin <= 4.1.1 - Race Condition vulnerability

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Themeum Tutor LMS tutor allows Leveraging Race Conditions.This issue affects Tutor LMS: from n/a through 4.1.1...

5.3CVSS0.00167EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/08 1:14 p.m.•22 views

CVE-2026-42698

The Tutor LMS WordPress plugin (versions n/a through 4.1.1 ) is vulnerable to a Race Condition (CWE-362) caused by concurrent execution using a shared resource with improper synchronization. This flaw allows an attacker to leverage race conditions to impact the integrity of the system. Exploitati...

5.3CVSS5.8AI score0.00167EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/08 12:00 a.m.•14 views

CVE-2026-42698: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Themeum Tutor LMS tutor allows Leveraging Race Conditions.This issue affects Tutor LMS: from n/a through 4.1.1...

5.3CVSS5.8AI score0.00167EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/08 12:00 a.m.•17 views

PT-2026-107970

Name of the Vulnerable Software and Affected Versions Tutor LMS versions prior to 4.1.1 Description A race condition exists due to concurrent execution using a shared resource with improper synchronization. This allows an attacker to leverage race conditions to potentially manipulate the...

5.3CVSS5.8AI score0.00167EPSS
SaveExploits0References4
NVD
NVD
•added 2026/07/13 10:16 a.m.•30 views

CVE-2026-57694

Authorization Bypass Through User-Controlled Key vulnerability in Themeum Tutor LMS tutor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tutor LMS: from n/a through = 3.9.13...

6.5CVSS0.00335EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/13 8:41 a.m.•20 views

CVE-2026-57694

Authorization Bypass Through User-Controlled Key vulnerability in Themeum Tutor LMS tutor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tutor LMS: from n/a through = 3.9.13...

6.5CVSS6AI score0.00335EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/07/13 8:41 a.m.•26 views

EUVD-2026-43352

Authorization Bypass Through User-Controlled Key vulnerability in Themeum Tutor LMS tutor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tutor LMS: from n/a through = 3.9.13...

6.5CVSS6.1AI score0.00335EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/07/13 12:00 a.m.•41 views

PT-2026-57739

Authorization Bypass Through User-Controlled Key vulnerability in Themeum Tutor LMS tutor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tutor LMS: from n/a through = 3.9.13...

6.5CVSS6.1AI score0.00335EPSS
SaveExploits0References2
NVD
NVD
•added 2026/04/15 11:16 a.m.•27 views

CVE-2026-40740

Missing Authorization vulnerability in Themeum Tutor LMS tutor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tutor LMS: from n/a through = 3.9.7...

5.4CVSS0.00184EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/04/15 10:21 a.m.•13 views

CVE-2026-40740

Missing Authorization vulnerability in Themeum Tutor LMS tutor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tutor LMS: from n/a through = 3.9.7...

5.9AI score0.00184EPSS
SaveExploits0References2
Rows per page
Query Builder