Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Tutor LMS – eLearning and online course solution 1.8.3 Clear all filters
TI-2021-06478 CVE-2021-24186 · GHSA-5fhw-gmrx-mwwc

Tutor LMS < 1.8.3 - SQL Injection via tutor_answering_quiz_question/get_answer_by_id

Priority LOW 31

The tutor_answering_quiz_question/get_answer_by_id function pair from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.8.3 was vulnerable to UNION based SQL injection that could be exploited…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01253 Published 2021-04-05 Fixed in 1.8.3 CWE-89
TI-2021-06475 CVE-2021-24183 · GHSA-vfx3-5xwg-q5jm

Tutor LMS < 1.8.3 - SQL Injection via tutor_quiz_builder_get_question_form

Priority LOW 32

The tutor_quiz_builder_get_question_form AJAX action from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.8.3 was vulnerable to UNION based SQL injection that could be exploited by students…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01742 Published 2021-04-05 Fixed in 1.8.3 CWE-89
TI-2021-06474 CVE-2021-24182 · GHSA-73w4-x8m4-8fjh

Tutor LMS < 1.8.3 - SQL Injection via tutor_quiz_builder_get_answers_by_question

Priority LOW 32

The tutor_quiz_builder_get_answers_by_question AJAX action from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.8.3 was vulnerable to UNION based SQL injection that could be exploited by st…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01742 Published 2021-04-05 Fixed in 1.8.3 CWE-89