CVE-2025-13934 | Tutor LMS Plugin up to 3.9.3 on WordPress Course Enrollment course_enrollment authorization

January 9, 2026 Yanac

A vulnerability, which was classified as critical, was found in Tutor LMS Plugin up to 3.9.3 on WordPress. This affects the function course_enrollment of the component Course Enrollment. Executing a manipulation can lead to missing authorization.

This vulnerability is handled as CVE-2025-13934. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More