🧹It's time for some spring cleaning! All researchers earn over 6.25x our normal bounty rates, through May 27th, 2024, when Wordfence handles responsible disclosure for our Spring Cleaning Bug Extravaganza! Learn more about our bug bounty program
Register as a researcher and submit your vulnerabilities today!

Tutor LMS – eLearning and online course solution

Wordfence Intelligence > Vulnerability Database > WordPress Plugins > Tutor LMS – eLearning and online course solution

Information

Software Type	Plugin
Software Slug	tutor (view on wordpress.org)
Software Status	Active
Software Author	themeum
Software Website	www.themeum.com
Software Downloads	2,035,200
Software Active Installs	80,000
Software Record Last Updated	April 27, 2024

Showing 21-32 of 32 Vulnerabilities

Tutor LMS <= 1.9.8 - Admin+ Stored Cross-Site Scripting

5.5

CVE-2021-24740

Sep 20, 2021

Researcher: Shivam Rai

Tutor LMS <= 1.9.5 - Cross-Site Scripting

6.1

CVE ID Unknown

Aug 9, 2021

Researcher: WPScanTeam

Tutor LMS <= 1.9.1 - Authenticated Stored Cross-Site Scripting

5.5

CVE-2021-24455

Jun 28, 2021

Researcher: Phu Tran

Tutor LMS <= 1.8.7 - Authenticated Local File Inclusion

5.5

CVE-2021-24242

Apr 5, 2021

Researcher: sasa

Tutor LMS <=1.8.2 - SQL Injection via tutor_answering_quiz_question/get_answer_by_id

8.8

CVE-2021-24186

Mar 15, 2021

Researcher: Chloe Chamberland

Tutor LMS <=1.8.2 - SQL Injection via tutor_quiz_builder_get_answers_by_question

8.8

CVE-2021-24182

Mar 15, 2021

Researcher: Chloe Chamberland

Tutor LMS – eLearning and online course solution <= 1.7.6 - SQL Injection

6.5

CVE-2021-24181

Mar 15, 2021

Researcher: Chloe Chamberland

Tutor LMS – eLearning and online course solution <=1.7.6 - SQL Injection

6.5

CVE-2021-24185

Mar 15, 2021

Researcher: Chloe Chamberland

Tutor LMS <= 1.8.2 - SQL Injection via tutor_quiz_builder_get_question_form

6.5

CVE-2021-24183

Mar 15, 2021

Researcher: Chloe Chamberland

Tutor LMS – eLearning and online course solution <= 1.7.6 - Unprotected AJAX including Privilege Escalation

8.8

CVE-2021-24184

Mar 15, 2021

Researcher: Chloe Chamberland

Tutor LMS <= 1.9.12 - Reflected Cross-Site Scripting

6.1

CVE ID Unknown

Jan 10, 2021

Researcher: WPScanTeam

Tutor LMS < 1.5.3 - Cross-Site Request Forgery

8.8

CVE-2020-8615

Feb 4, 2020

Researcher: Jinson Varghese Behanan

Title	CVE ID	CVSS	Researchers	Date
Tutor LMS <= 1.9.8 - Admin+ Stored Cross-Site Scripting	CVE-2021-24740	5.5	Shivam Rai	September 20, 2021
Tutor LMS <= 1.9.5 - Cross-Site Scripting		6.1	WPScanTeam	August 9, 2021
Tutor LMS <= 1.9.1 - Authenticated Stored Cross-Site Scripting	CVE-2021-24455	5.5	Phu Tran	June 28, 2021
Tutor LMS <= 1.8.7 - Authenticated Local File Inclusion	CVE-2021-24242	5.5	sasa	April 5, 2021
Tutor LMS <=1.8.2 - SQL Injection via tutor_answering_quiz_question/get_answer_by_id	CVE-2021-24186	8.8	Chloe Chamberland	March 15, 2021
Tutor LMS <=1.8.2 - SQL Injection via tutor_quiz_builder_get_answers_by_question	CVE-2021-24182	8.8	Chloe Chamberland	March 15, 2021
Tutor LMS – eLearning and online course solution <= 1.7.6 - SQL Injection	CVE-2021-24181	6.5	Chloe Chamberland	March 15, 2021
Tutor LMS – eLearning and online course solution <=1.7.6 - SQL Injection	CVE-2021-24185	6.5	Chloe Chamberland	March 15, 2021
Tutor LMS <= 1.8.2 - SQL Injection via tutor_quiz_builder_get_question_form	CVE-2021-24183	6.5	Chloe Chamberland	March 15, 2021
Tutor LMS – eLearning and online course solution <= 1.7.6 - Unprotected AJAX including Privilege Escalation	CVE-2021-24184	8.8	Chloe Chamberland	March 15, 2021
Tutor LMS <= 1.9.12 - Reflected Cross-Site Scripting		6.1	WPScanTeam	January 10, 2021
Tutor LMS < 1.5.3 - Cross-Site Request Forgery	CVE-2020-8615	8.8	Jinson Varghese Behanan	February 4, 2020

«
‹
1
2

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.