Volerion logoVolerion
Volerion logoVolerion

Tutor LMS Sensitive Information Exposure Vulnerability

Vulnerability

A vulnerability allowing sensitive information exposure exists in the Tutor LMS WordPress plugin, in all versions through 3.8.3. This issue enables authenticated attackers with tutor-level access or higher to access assignments from courses they do not teach, potentially revealing sensitive information.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information contained in course assignments.

Remediation

Users can update to Tutor LMS version 3.9.0 or a newer patched version to address this vulnerability.

Added: Oct 25, 2025, 6:22 AM
Updated: Oct 25, 2025, 6:22 AM

Vulnerability Rating

Custom Algorithm
spread
5.2
impact
2.5
exploitability
6.1
remediation
7.7
relevance
0.8
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.