CVE-2026-93681

CVE-2026-93681 published: The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via display_name Parameter in all versions up to, and including, 4.1.0 due to insufficient input sanitization and output escaping. This ma...

View full NVD advisory → ← Back to CVE watch