cleantalk
Vulnerabilities and Security Researches

Tutor LMS – eLearning and online course solution, CVE-2025-58993

CVE, Research URL

CVE-2025-58993

Home page URL

Security reports for Tutor LMS – eLearning and online course solution

Application

Tutor LMS – eLearning and online course solution

Published on
Sep 09, 2025
Research Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor LMS allows SQL Injection. This issue affects Tutor LMS: from n/a through 3.7.4.
Affected versions
Min -, max 3.8.0.
Status
vulnerable
Previous vulnerability researches
Easy WP SMTP by SendLayer – WordPress SMTP and Email Log Plugin (CVE-2022-42699) , Jun 07, 2024
Easy WP SMTP by SendLayer – WordPress SMTP and Email Log Plugin (CVE-2019-25141) , Jun 07, 2024
Easy WP SMTP by SendLayer – WordPress SMTP and Email Log Plugin (CVE-2020-35234) , Jun 07, 2024
Easy WP SMTP by SendLayer – WordPress SMTP and Email Log Plugin (CVE-2017-7723) , Jun 07, 2024
Easy WP SMTP by SendLayer – WordPress SMTP and Email Log Plugin (CVE-2022-3334) , Jun 07, 2024
New vulnerability
Advanced Settings (CVE-2025-58975) , Sep 10, 2025
Auto Save Remote Images (Drafts) (CVE-2025-7843) , Sep 10, 2025
Welcart e-Commerce (CVE-2025-58984) , Sep 10, 2025
ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) (CVE-2025-58990) , Sep 10, 2025
Additional Custom Product Tabs for WooCommerce (CVE-2025-58985) , Sep 10, 2025