Unknown Tutor LMS

CVE-2026-85570 Unrated Tutor LMS 1.6.4 - 4.1.3 - Subscriber+ Quiz Answer Key Disclosure 0.1%
CVE-2026-96537 High 7.5 Tutor LMS < 4.1.1 - Unauthenticated Tutor Page Force-Publish and Content Overwrite 0.2%
CVE-2026-85571 Medium 6.5 Tutor LMS 4.0.5 - 4.1.0 - Instructor+ Arbitrary Post Reparenting via IDOR 0.2%
CVE-2026-85572 Medium 4.3 Tutor LMS 4.0.0 - < 4.0.8 - Subscriber+ Cross-Course Lesson Comment Disclosure 0.3%
CVE-2026-85569 High 7.2 Tutor LMS 2.7.1 - < 4.0.8 - Read-Only API Key Privilege Escalation via REST Request Misclassification 0.5%
CVE-2026-19092 Critical 9.8 Tutor LMS < 4.0.6 - Unauthenticated Arbitrary Zero-Argument Function Invocation via Template Variable Shadowing 2.6%
CVE-2026-19094 Medium 5.3 Tutor LMS < 4.0.6 - Unauthenticated SQLi via 'offset' and 'item_per_page' Parameters 0.4%
CVE-2026-19093 Medium 6.8 Tutor LMS < 4.0.6 - Instructor+ Arbitrary File Read via Video Path 0.5%
CVE-2026-14187 Low 2.7 Tutor LMS < 4.0.6 - Instructor+ Cross-Instructor Private Course Disclosure via IDOR 0.3%
CVE-2026-14306 Medium 4.3 Tutor LMS < 3.9.14 - Subscriber+ Paid Course Content Disclosure via Enrollment Check Bypass 0.3%
CVE-2026-14310 Medium 5.4 Tutor LMS < 4.0.0 - Subscriber+ Cross-Course Q&A Content Disclosure and Reply Injection 0.2%
CVE-2026-12275 High 7.1 Tutor LMS < 3.9.13 - Subscriber+ Unauthorized Course Enrollment and Private Course Content Disclosure via Droip/Kirki Integration 0.3%
CVE-2026-12274 Medium 6.5 Tutor LMS < 3.9.13 - Instructor+ Arbitrary Post Overwrite via IDOR 0.3%
CVE-2026-12273 Medium 4.3 Tutor LMS < 3.9.13 - Subscriber+ Arbitrary Auto-Approved Comment Creation 0.3%
CVE-2026-12271 Medium 5.4 Tutor LMS < 3.9.13 - Subscriber+ Arbitrary Quiz Attempt Modification via IDOR 0.3%
CVE-2023-4805 Medium 5.4 Tutor LMS < 2.3.0 - Subscriber+ Stored Cross-Site Scripting 0.5%
CVE-2023-3133 Unrated Tutor LMS < 2.2.1 - Unauthenticated Access to Tutor LMS Lesson Resources via REST API 1.0%
CVE-2023-0236 Medium 6.1 Tutor LMS < 2.0.10 - Reflected Cross-Site Scripting 1.3%