Tutor LMS Elementor Addons

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Tutor LMS Elementor Addons

Information

Software Type Plugin
Software Slug tutor-lms-elementor-addons (view on wordpress.org)
Software Status Active
Software Author themeum
Software Website www.themeum.com
Software Downloads 629,743
Software Active Installs 30,000
Software Record Last Updated August 8, 2026

6 Vulnerabilities

Submit a Vulnerability
Tutor LMS Elementor Addons <= 4.0.0 - Missing Authorization to Authenticated (Subscriber+) Tutor LMS and Elementor Plugin Activation
4.3
CVE-2026-1372
Jul 20, 2026
Researcher: Supakiad S. (m3ez)
Tutor LMS Elementor Addons <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-63042
Nov 30, 2025
Researcher: Mdr
Tutor LMS Elementor Addons <= 2.1.5 - Missing Authorization
4.3
CVE-2024-53816
Dec 2, 2024
Researcher: Ananda Dhakal
Tutor LMS Elementor Addons <= 2.1.5 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Installation
4.3
CVE-2024-10897
Nov 14, 2024
Researcher: Tieu Pham Trong Nhan
Tutor LMS Elementor Addons <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Course Carousel Widget
6.4
CVE-2024-5576
Aug 19, 2024
Researcher: wesley (wcraft)
Tutor LMS Elementor Addons <= 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-29913
Mar 25, 2024
Researcher: Abu Hurayra (HurayraIIT)
Title Status CVE ID CVSS Researchers Date
Tutor LMS Elementor Addons <= 4.0.0 - Missing Authorization to Authenticated (Subscriber+) Tutor LMS and Elementor Plugin Activation Unpatched CVE-2026-1372 4.3 Supakiad S. (m3ez) July 20, 2026
Tutor LMS Elementor Addons <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2025-63042 6.4 Mdr November 30, 2025
Tutor LMS Elementor Addons <= 2.1.5 - Missing Authorization Patched CVE-2024-53816 4.3 Ananda Dhakal December 2, 2024
Tutor LMS Elementor Addons <= 2.1.5 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Installation Patched CVE-2024-10897 4.3 Tieu Pham Trong Nhan November 14, 2024
Tutor LMS Elementor Addons <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Course Carousel Widget Patched CVE-2024-5576 6.4 wesley (wcraft) August 19, 2024
Tutor LMS Elementor Addons <= 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2024-29913 6.4 Abu Hurayra (HurayraIIT) March 25, 2024

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation