Plugin icon

Tutor Pro

tutor-pro

Vulnerabilities:

9

Last Updated:

April 5, 2026

Active Installs:

n/a

Published
Title
Fixed in
CVSS
Published
2026-03-23
Title
Tutor LMS Pro <= 3.9.4 - Missing Authorization
Fixed in
No known fix
CVSS
5.3 (medium)
Published
2026-03-09
Title
Tutor LMS Pro < 3.9.6 - Authentication Bypass via Social Login
Fixed in
Fixed in 3.9.6
CVSS
9.8 (critical)
Published
2026-01-13
Title
Tutor LMS Pro <= 3.8.3 - Unauthenticated SQL Injection
Fixed in
No known fix
CVSS
7.5 (high)
Published
2025-10-24
Title
Tutor LMS Pro < 3.9.0 - Subscriber+ Other Assignments Access/Edit via IDOR
Fixed in
Fixed in 3.9.0
CVSS
5.4 (medium)
Published
2025-08-12
Title
Tutor LMS Pro – eLearning and online course solution < 3.7.1 - Authenticated (Tutor Instructor+) SQL Injection
Fixed in
Fixed in 3.7.1
CVSS
8.8 (high)
Published
2024-08-29
Title
Tutor LMS Pro < 2.7.3 - Missing Authorization to Authenticated (Subscriber+) Insecure Direct Object Reference
Fixed in
Fixed in 2.7.3
CVSS
7.1 (high)
Published
2024-05-15
Title
Tutor LMS Pro < 2.7.1 - Missing Authorization
Fixed in
Fixed in 2.7.1
CVSS
7.3 (high)
Published
2024-05-15
Title
Tutor LMS Pro < 2.7.1 - Missing Authorization to Privilege Escalation
Fixed in
Fixed in 2.7.1
CVSS
8.8 (high)
Published
2024-05-15
Title
Tutor LMS Pro < 2.7.1 - Missing Authorization to SQL Injection
Fixed in
Fixed in 2.7.1
CVSS
8.8 (high)