Tutor LMS

SQL Injection Vulnerability <= 3.7.4

7.6

9 September, 2025

HTML Injection vulnerability <= 3.4.0

4.3

7 April, 2025

Unauthenticated SQL Injection via rating_filter vulnerability <= 2.7.6

9.3

21 November, 2024

User Registration Setting Bypass to Unauthorized User Registration vulnerability <= 2.7.6

5.3

21 November, 2024

CrossSite Request Forgery via 'addon_enable_disable' vulnerability <= 2.7.4

4.3

10 September, 2024