Tutor LMS

Missing Authorization to Sensitive Information Exposure vulnerability <= 3.8.3

4.3

25 October, 2025

Missing Authorization to Unauthenticated Payment Status Update vulnerability <= 3.8.3

6.5

25 October, 2025

SQL Injection Vulnerability <= 3.7.4

7.6

9 September, 2025

HTML Injection vulnerability <= 3.4.0

4.3

7 April, 2025

Unauthenticated SQL Injection via rating_filter vulnerability <= 2.7.6

9.3

21 November, 2024