Approved changes feed: RSS · Atom
cpe:2.3:a:themeum:tutor_lms:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Themeum (12449a9f-b8a3-5f81-9e39-f958a6d45415) |
|---|---|
| Product | Tutor Lms (2fe227b0-846b-5837-98cd-fc776635d107) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/themeum/tutor |
purl2cpe | 2026-06-01 10:12:52.184656 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-57694 |
vulnerable | 2026-07-29 01:03:16.037457 |
WordPress Tutor LMS plugin <= 3.9.13 - Insecure Direct Object References (IDOR) vulnerability
MEDIUM (6.5)
Authorization Bypass Through User-Controlled Key vulnerability in Themeum Tutor LMS tutor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tutor LMS: from n/a through <= 3.9.13.
Published: 2026-07-13T08:41:24.530Z
Updated: 2026-07-13T13:41:02.541Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-40743 |
vulnerable | 2026-07-29 00:49:30.398115 |
WordPress Tutor LMS plugin <= 3.9.7 - Broken Access Control vulnerability
MEDIUM (6.5)
Unauthenticated Broken Access Control in Tutor LMS <= 3.9.7 versions.
Published: 2026-06-15T20:18:13.192Z
Updated: 2026-06-16T12:32:51.257Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-40740 |
vulnerable | 2026-06-08 08:01:20.940603 |
WordPress Tutor LMS plugin <= 3.9.7 - Broken Access Control vulnerability
MEDIUM (5.4)
Missing Authorization vulnerability in Themeum Tutor LMS tutor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tutor LMS: from n/a through <= 3.9.7.
Published: 2026-04-15T10:21:34.311Z
Updated: 2026-04-29T09:52:04.818Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-23799 |
vulnerable | 2026-06-08 07:51:16.264545 |
WordPress Tutor LMS plugin <= 3.9.5 - Broken Access Control vulnerability
MEDIUM (6.5)
Missing Authorization vulnerability in Themeum Tutor LMS tutor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tutor LMS: from n/a through <= 3.9.5.
Published: 2026-03-05T05:53:48.754Z
Updated: 2026-04-28T16:14:46.898Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-58993 |
vulnerable | 2026-06-08 07:35:19.863115 |
WordPress Tutor LMS Plugin <= 3.7.4 - SQL Injection Vulnerability
HIGH (7.6)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor LMS tutor allows SQL Injection.This issue affects Tutor LMS: from n/a through <= 3.7.4.
Published: 2025-09-09T16:33:07.244Z
Updated: 2026-04-28T16:13:51.323Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-47555 |
vulnerable | 2026-06-08 07:27:14.554636 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-32230 |
vulnerable | 2026-06-08 07:18:59.335042 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-32223 |
vulnerable | 2026-06-08 07:18:59.327284 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-43282 |
vulnerable | 2026-06-08 06:45:50.011654 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-43231 |
vulnerable | 2026-06-08 06:45:49.907756 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-43142 |
vulnerable | 2026-06-08 06:45:49.678231 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39645 |
vulnerable | 2026-06-08 06:41:51.273861 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-37947 |
vulnerable | 2026-06-08 06:39:48.290024 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-37266 |
vulnerable | 2026-06-08 06:39:47.012824 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-37256 |
vulnerable | 2026-06-08 06:39:46.975806 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25990 |
vulnerable | 2026-06-08 05:56:11.893117 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25800 |
vulnerable | 2026-06-08 05:56:10.643317 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25799 |
vulnerable | 2026-06-08 05:56:10.642630 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25700 |
vulnerable | 2026-06-08 05:56:09.664759 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.