Read the docs

themeum

Records172All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical8CVSS 9.0–10.0
CVSS high48CVSS 7.0–8.9

Exploited now

themeum records in CISA KEV

No themeum vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Tutor Lms 49 records HIGH Wp Crowdfunding 11 records MEDIUM Qubely 6 records HIGH Droip 4 records MEDIUM Tutor Lms Elementor Addons 4 records LOW Wp Page Builder 4 records MEDIUM Tutor Lms - Migration Tool 2 records LOW

Records

4 records in Tutor Lms Elementor Addons · all components

TI-2024-19680 CVE-2024-29913 · GHSA-xj5j-65hx-74v4

WordPress Tutor LMS Elementor Addons plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Tutor LMS Elementor Addons allows Stored XSS.This issue affects Tutor LMS Elementor Addons: from n/a through 2…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00336 Published 2024-03-27 No fix listed CWE-79
TI-2024-05180 CVE-2024-5576 · GHSA-c26w-m5xx-74v5

Cross-site scripting in themeum Tutor LMS Elementor Addons

Priority LOW 28

The Tutor LMS Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'course_carousel_skin' attribute within the plugin's Course Carousel widget in all versions up to, and including, 2…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00342 Published 2024-08-20 No fix listed CWE-79
TI-2024-10101 CVE-2024-10897 · GHSA-82g8-54mp-r3ww

Tutor LMS Elementor Addons <= 2.1.5 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Installation

Priority LOW 20

The Tutor LMS Elementor Addons plugin for WordPress is vulnerable to unauthorized plugin installation due to a missing capability check on the install_etlms_dependency_plugin() function in all versions up to, and includi…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00312 Published 2024-11-15 No fix listed CWE-862
Open these records in search →