Unknown Tutor LMS
3 known vulnerabilities in Unknown Tutor LMS, 1 critical, with patch priority, exploit likelihood and the news covering them.
Latest vulnerabilities
- CVE-2026-85572 CVSS 4.3 medium The Tutor LMS WordPress plugin before 4.0.8 does not check that a user has access to a course before returning its lesson discussion…
- CVE-2026-85569 CVSS 7.2 high The Tutor LMS WordPress plugin before 4.0.8 does not correctly determine whether an incoming request is addressed to its own REST API, and…
- CVE-2026-19092 CVSS 9.8 critical The Tutor LMS WordPress plugin before 4.0.6 does not prevent request data from overwriting internal variables while rendering templates…