Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Tutor LMS – eLearning and online course solution 1.7.7 Clear all filters
TI-2021-06477 CVE-2021-24185 · GHSA-g8wh-vch5-x6pw

Tutor LMS < 1.7.7 - SQL Injection via tutor_place_rating

Priority LOW 31

The tutor_place_rating AJAX action from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.7.7 was vulnerable to blind and time based SQL injections that could be exploited by students.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01253 Published 2021-04-05 Fixed in 1.7.7 CWE-89
TI-2021-06476 CVE-2021-24184 · GHSA-5hff-r5rf-v64j

Tutor LMS < 1.7.7 - Unprotected AJAX including Privilege Escalation

Priority MEDIUM 41

Several AJAX endpoints in the Tutor LMS – eLearning and online course solution WordPress plugin before 1.7.7 were unprotected, allowing students to modify course information and elevate their privileges among many other…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01439 Published 2021-04-05 Fixed in 1.7.7 CWE-862
TI-2021-06473 CVE-2021-24181 · GHSA-22r7-2v6v-5qmw

Tutor LMS < 1.7.7 - SQL Injection via tutor_mark_answer_as_correct

Priority LOW 31

The tutor_mark_answer_as_correct AJAX action from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.7.7 was vulnerable to blind and time based SQL injections that could be exploited by studen…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01253 Published 2021-04-05 Fixed in 1.7.7 CWE-89