Tutor LMS – eLearning and online course solution, CVE-2025-6680
- CVE, Research URL
- Published on
- Oct 25, 2025
- Research Description
- The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.8.3. This makes it possible for authenticated attackers, with tutor-level access and above, to view assignments for courses they don't teach which may contain sensitive information.
- Affected versions
-
max 3.9.0.
- Status
-
vulnerable
| Previous vulnerability researches |
|---|
| Maps for WP (CVE-2025-57952) , Apr 24, 2026 |
| Maps for WP (CVE-2025-32179) , Apr 06, 2025 |
| Maps for WP (CVE-2024-13648) , Feb 22, 2025 |