WordPress plugin
Tutor LMS – eLearning and online course solution security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical3
- High19
- Medium79
- Low1
All Tutor LMS – eLearning and online course solution vulnerabilities
Nothing in this view
No vulnerabilities match this filter. Show all.
Tutor LMS – eLearning and online course solution: common questions
Does Tutor LMS – eLearning and online course solution have known vulnerabilities?
Yes. VulnCrest Radar lists 102 known vulnerabilities in Tutor LMS – eLearning and online course solution: 3 critical, 19 high, 79 medium, 1 low. At least one is not fixed in the latest version.
How do I check which version of Tutor LMS – eLearning and online course solution I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Tutor LMS – eLearning and online course solution vulnerability?
CVE-2026-93779, published Nov 6, 2026: Tutor LMS <= 4.1.2 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Information Exposure via REST API Endpoints. Severity: Medium (CVSS 6.5).
Is any Tutor LMS – eLearning and online course solution vulnerability listed in CISA KEV?
No. None of the known Tutor LMS – eLearning and online course solution vulnerabilities is currently listed in the CISA KEV catalog.