CVE-2025-13628 | Tutor LMS Plugin up to 3.9.3 on WordPress Coupon bulk_action_handler authorization

January 9, 2026 Yanac

A vulnerability was found in Tutor LMS Plugin up to 3.9.3 on WordPress. It has been classified as problematic. Affected by this vulnerability is the function bulk_action_handler of the component Coupon Handler. This manipulation causes missing authorization.

The identification of this vulnerability is CVE-2025-13628. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More