Medium
CVE-2025-13679
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 124
Reset filters
Medium
CVE-2025-47555
Tutor LMS <= 3.9.4 - Authenticated (Instructor+) Insecure Direct Object Reference
Medium
CVE-2025-63042
Tutor LMS Elementor Addons <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-6639
Tutor LMS Pro – eLearning and online course solution <= 3.8.3 - Authenticated (Subscriber+) Insecure Direct Object Reference to View/Edit Other Assignments
Medium
CVE-2025-6680
Tutor LMS <= 3.8.3 - Missing Authorization to Sensitive Information Exposure
Medium
CVE-2025-11564
Tutor LMS – eLearning and online course solution <= 3.8.3 - Missing Authorization to Unauthenticated Payment Status Update
Medium
CVE-2025-64236
Tuturn < 3.6 - Unauthenticated Missing Authorization
Medium
CVE-2025-64235
Tuturn < 3.6 - Authenticated (Subscriber+) Arbitrary File Download
Medium
CVE-2025-58993
Tutor LMS <= 3.7.4 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-7841
Sertifier Certificate & Badge Maker for WordPress – Tutor LMS <= 1.19 - Cross-Site Request Forgery to Settings Update
High
CVE-2025-6184
Tutor LMS Pro – eLearning and online course solution <= 3.7.0 - Authenticated (Tutor Instructor+) SQL Injection
Medium
CVE-2025-53214
Sertifier Certificate & Badge Maker <= 1.21 - Missing Authorization
Medium
CVE-2025-32230
Tutor LMS <= 3.4.0 - Authenticated (Subscriber+) HTML Injection
Medium
CVE-2024-11466
Intro Tour Tutorial DeepPresentation <= 6.5.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-53816
Tutor LMS Elementor Addons <= 2.1.5 - Missing Authorization
Medium
CVE-2025-24566
Intro Tour Tutorial DeepPresentation <= 6.5.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-10393
Tutor LMS <= 2.7.6 - User Registration Setting Bypass to Unauthorized User Registration
High
CVE-2024-10400
Tutor LMS <= 2.7.6 - Unauthenticated SQL Injection via rating_filter
Medium
CVE-2024-10897
Tutor LMS Elementor Addons <= 2.1.5 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Installation
Medium
CVE-2023-2919
Tutor LMS <= 2.7.4 - Cross-Site Request Forgery via 'addon_enable_disable'
High
CVE-2024-5784
Tutor LMS Pro <= 2.7.2 - Missing Authorization to Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2024-5576
Tutor LMS Elementor Addons <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Course Carousel Widget
High
CVE-2024-43282
Tutor LMS <= 2.7.2 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-43231
Tutor LMS <= 2.7.3 - Authenticated (Instructor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.