Medium
CVE-2023-39990
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 124
Reset filters
Medium
55fac183-bd8d-4e16-b25a-784861897deb
Paid Memberships Pro - Courses for Membership Add On <= 1.2.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
0e454573-4b34-40e3-b4c3-10eb71dfa03e
Paid Memberships Pro - Courses for Membership Add On <= 1.2.3 - Cross-Site Request Forgery to Course Modifications
Medium
CVE-2023-33999
Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get
High
CVE-2023-3133
Tutor LMS <= 2.2.0 - Missing Authorization via REST API
Critical
CVE-2023-25700
Tutor LMS <= 2.1.10 - Unauthenticated SQL Injection
High
CVE-2023-25990
Tutor LMS <= 2.1.10 - Authenticated (Tutor Instructor+) SQL Injection
High
CVE-2023-25800
Tutor LMS <= 2.2.0 - Authenticated (Student+) SQL Injection
Medium
CVE-2023-25799
Tutor LMS <= 2.1.8 - Missing Authorization via multiple AJAX actions
Medium
CVE-2023-0236
Tutor LMS <= 2.0.9 - Reflected Cross-Site Scripting
Medium
CVE-2022-2563
Tutor LMS <= 2.0.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
bcaf9b92-5e59-47c5-a04e-3ef5c53a2640
Tutor LMS – eLearning and online course solution 2.0.0-2.0.8 - Reflected Cross-Site Scripting
Critical
d7f024c5-80d8-490f-b448-9bccb877024b
Premium Courses & eLearning <= 1.0.5 - SQL Injection
Medium
CVE-2021-25017
Tutor LMS <= 1.9.11 - Reflected Cross-Site Scripting
High
66130071-668e-4692-afd3-5fcc9039f10f
Tutor LMS <= 1.9.11 - Stored Cross-Site Scripting
Medium
CVE-2021-24873
Tutor LMS <= 1.9.10 - Reflected Cross-Site Scripting
Medium
CVE-2021-24740
Tutor LMS <= 1.9.8 - Admin+ Stored Cross-Site Scripting
Medium
a0b14d91-f8f9-41df-b2eb-12792fb3a197
Tutor LMS <= 1.9.5 - Cross-Site Scripting
Medium
CVE-2021-24455
Tutor LMS <= 1.9.1 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24242
Tutor LMS <= 1.8.7 - Authenticated Local File Inclusion
High
CVE-2021-24186
Tutor LMS <=1.8.2 - SQL Injection via tutor_answering_quiz_question/get_answer_by_id
High
CVE-2021-24182
Tutor LMS <=1.8.2 - SQL Injection via tutor_quiz_builder_get_answers_by_question
Medium
CVE-2021-24181
Tutor LMS – eLearning and online course solution <= 1.7.6 - SQL Injection
Medium
CVE-2021-24185
Tutor LMS – eLearning and online course solution <=1.7.6 - SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.