CVE-2025-58993

HIGH

WordPress Tutor LMS Plugin <= 3.7.4 - SQL Injection Vulnerability

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2025-58993 has a selected CVSS score of 7.6 (high).

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor LMS tutor allows SQL Injection.This issue affects Tutor LMS: from n/a through <= 3.7.4.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Sep 9, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Tutor LMS

Browse Themeum / Tutor LMStutor

Default status: unaffected

CVE ListThrough 3.7.4affected

References

3