The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.8.3. This makes it possible for authenticated attackers, with tutor-level access and above, to view assignments for courses they don't teach which may contain sensitive information.
References
Configurations
History
05 Dec 2025, 00:23
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Themeum tutor Lms
Themeum |
|
| CWE | NVD-CWE-noinfo | |
| CPE | cpe:2.3:a:themeum:tutor_lms:*:*:*:*:free:wordpress:*:* | |
| References | () https://plugins.trac.wordpress.org/changeset/3382577/tutor/trunk/templates/dashboard/assignments/review.php?old=3249440&old_path=tutor%2Ftrunk%2Ftemplates%2Fdashboard%2Fassignments%2Freview.php - Patch | |
| References | () https://www.wordfence.com/threat-intel/vulnerabilities/id/1b8d88e4-a9dc-4740-b836-99f730beefcb?source=cve - Product, Third Party Advisory |
25 Oct 2025, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-10-25 06:15
Updated : 2025-12-05 00:23
NVD link : CVE-2025-6680
Mitre link : CVE-2025-6680
CVE.ORG link : CVE-2025-6680
JSON object : View
Products Affected
themeum
- tutor_lms
CWE