4 matches found
CVE-2024-29913
CVE-2024-29913 is an improper input handling vulnerability causing Stored XSS in Tutor LMS Elementor Addons (Themeum). Affected: Tutor LMS Elementor Addons up to 2.1.3. Root cause: improper neutralization of input during web page generation. Impact: stored XSS. Remediation/patch details are not p...
CVE-2024-10897
CVE-2024-10897 affects the WordPress plugin Tutor LMS Elementor Addons (versions up to and including 2.1.5). The issue is a missing capability check in install_etlms_dependency_plugin(), enabling authenticated users with Subscriber+ privileges to install Elementor or Tutor LMS. Impact is limited ...
CVE-2024-53816
The CVE-2024-53816 entry concerns a Missing Authorization (Broken Access Control) vulnerability in the WordPress plugin Tutor LMS Elementor Addons by Themeum, affecting versions up to 2.1.5. Multiple connected sources corroborate this, including Red Hat and CVE/CVELIST records, Patchstack entries...