Filtered by vendor Tutorlms
Subscriptions
Filtered by product Tutor Lms
Subscriptions
Total
2 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-19092 | 2 Tutorlms, Wordpress | 2 Tutor Lms, Wordpress | 2026-09-01 | 9.8 Critical |
| The Tutor LMS WordPress plugin before 4.0.6 does not prevent request data from overwriting internal variables while rendering templates, allowing unauthenticated users to invoke arbitrary zero-argument PHP functions and receive their output. | ||||
| CVE-2026-14306 | 2 Tutorlms, Wordpress | 2 Tutor Lms, Wordpress | 2026-08-12 | 4.3 Medium |
| The Tutor LMS WordPress plugin before 3.9.14 does not properly verify enrollment when restricting access to protected course content, allowing authenticated users with subscriber-level access and above who are enrolled in at least one course to view paid lesson, quiz, and assignment content belonging to other courses. | ||||
Page 1 of 1.