Unknown Tutor LMS vulnerabilities
18 published CVEs name Unknown Tutor LMS among the affected products.
- 18Published CVEs18 of them scored
- 15Last 12 monthspublished in the last year
- 1Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-85570
Tutor LMS 1.6.4 - 4.1.3 - Subscriber+ Quiz Answer Key Disclosure
Unknown · Tutor LMS
Medium4.3 - CVE-2026-96537
Tutor LMS < 4.1.1 - Unauthenticated Tutor Page Force-Publish and Content Overwrite
Unknown · Tutor LMS
High7.5 - CVE-2026-85571
Tutor LMS 4.0.5 - 4.1.0 - Instructor+ Arbitrary Post Reparenting via IDOR
Unknown · Tutor LMS
Medium6.5 - CVE-2026-85572
Tutor LMS 4.0.0 - < 4.0.8 - Subscriber+ Cross-Course Lesson Comment Disclosure
Unknown · Tutor LMS
Medium4.3 - CVE-2026-85569
Tutor LMS 2.7.1 - < 4.0.8 - Read-Only API Key Privilege Escalation via REST Request Misclassification
Unknown · Tutor LMS
High7.2 - CVE-2026-19092
Tutor LMS < 4.0.6 - Unauthenticated Arbitrary Zero-Argument Function Invocation via Template Variable Shadowing
Unknown · Tutor LMS
Critical9.8 - CVE-2026-19094
Tutor LMS < 4.0.6 - Unauthenticated SQLi via 'offset' and 'item_per_page' Parameters
Unknown · Tutor LMS
Medium5.3 - CVE-2026-19093
Tutor LMS < 4.0.6 - Instructor+ Arbitrary File Read via Video Path
Unknown · Tutor LMS
Medium6.8 - CVE-2026-14187
Tutor LMS < 4.0.6 - Instructor+ Cross-Instructor Private Course Disclosure via IDOR
Unknown · Tutor LMS
Low2.7 - CVE-2026-14306
Tutor LMS < 3.9.14 - Subscriber+ Paid Course Content Disclosure via Enrollment Check Bypass
Unknown · Tutor LMS
Medium4.3