WordPress Plugin Vulnerabilities | Page 46 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

Published

2024-03-12

Title

Tutor LMS – eLearning and online course solution < 2.6.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion

Slug

Published

2024-04-24

Title

Tutor LMS – eLearning and online course solution < 2.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tutor_instructor_list' Shortcode

Slug

Published

2024-04-26

Title

Tutor LMS < 2.7.0 - Missing Authorization to Unauthenticated Limited Options Update

Slug

Published

2024-05-15

Title

Tutor LMS – eLearning and online course solution < 2.7.1 - Authenticated (Instructor+) Insecure Direct Object Reference to Arbitrary Course Deletion

Slug

Published

2024-05-15

Title

Tutor LMS < 2.7.1 - Authenticated (Instructor+) SQL Injection

Slug

Published

2024-05-15

Title

Tutor LMS < 2.7.1 - Missing Authorization

Slug

Published

2024-06-06

Title

Tutor LMS – eLearning and online course solution < 2.7.2 - Authenticated (Instructor+) Insecure Direct Object Reference to Arbitrary Quiz Attempt Deletion

Slug

Published

2024-06-06

Title

Tutor LMS – eLearning and online course solution < 2.7.2 -Authenticated (Administrator+) SQL Injection

Slug

Published

2024-06-27

Title

Tutor LMS < 2.7.2 - Authenticated (Admin+) Path Traversal

Slug

Published

2024-07-10

Title

Tutor LMS < 2.7.3 - Authenticated (Tutor Instructor+) Stored Cross-Site Scripting

Slug

Published

2024-08-01

Title

Tutor LMS < 2.7.3 - Cross-Site Request Forgery

Slug

Published

2024-08-09

Title

Tutor LMS < 2.7.4 - Authenticated (Instructor+) Stored Cross-Site Scripting

Slug

Published

2024-08-07

Title

Tutor LMS < 2.7.4 - Missing Authorization

Slug

Published

2024-08-16

Title

Tutor LMS < 2.7.3 - Authenticated (Administrator+) SQL Injection

Slug

Published

2024-09-09

Title

Tutor LMS < 2.7.5 - Cross-Site Request Forgery via 'addon_enable_disable'

Slug

Published

2024-11-20

Title

Tutor LMS < 2.7.7 - Unauthenticated SQL Injection via rating_filter

Slug

Published

2024-11-20

Title

Tutor LMS < 2.7.7 - User Registration Setting Bypass to Unauthorized User Registration

Slug

Published

2025-04-07

Title

Tutor LMS < 3.4.1 - Subscriber+ HTML Injection

Slug

Published

2025-09-09

Title

Tutor LMS < 3.8.0 - Authenticated (Administrator+) SQL Injection

Slug

Published

2025-10-24

Title

Tutor LMS – eLearning and online course solution < 3.9.0 - Missing Authorization to Unauthenticated Payment Status Update

Slug

Published

2025-10-24

Title

Tutor LMS < 3.9.0 - Missing Authorization to Sensitive Information Exposure

Slug

Published

2026-01-07

Title

Tutor LMS < 3.9.4 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via tutor_order_details

Slug

Published

2026-01-08

Title

Tutor LMS – eLearning and online course solution < 3.9.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Coupon Modification

Slug

Published

2026-01-08

Title

Tutor LMS – eLearning and online course solution < 3.9.4 - Missing Authorization to Authenticated (Subscriber+) Course Enrollment Bypass

Slug

Published

2026-01-08

Title

Tutor LMS – eLearning and online course solution < 3.9.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Course Completion