CVE-2025-58993 — SQL Injection in Tutor LMS

CWE-89 — SQL Injection3 documents3 sources
Severity
—N/A
No vector
EPSS
0.0%
top 93.10%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Themeum Tutor LMS
Timeline
PublishedSep 9

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor LMS tutor allows SQL Injection.This issue affects Tutor LMS: from n/a through <= 3.7.4.

Affected Packages1 packages

▶CVEListV5themeum/tutor_lms3.7.4

🔴Vulnerability Details

2
GHSA
GHSA-3482-g6h6-r8v3: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor LMS allows SQL Injection↗2025-09-09
▶
CVEList
WordPress Tutor LMS Plugin <= 3.7.4 - SQL Injection Vulnerability↗2025-09-09
▶
CVE-2025-58993 — SQL Injection in Themeum Tutor LMS | cvebase