SQL Injection

Every one of the 21 is a mark on the map. Named now: 1 to 21, most at risk first.

1. Tutor LMS <= 2.7.6 - SQL InjectionCVE-2024-10400themeum · CVSS 7.5 · 83% likely

   CWE-89

2. Tutor LMS <= 2.1.10 - SQL InjectionCVE-2024-1751themeum · CVSS 8.8 · 3.1% likely

   CWE-89

3. Tutor LMS Pro <= 2.7.0 - Missing Authorization to Privilege EscalationCVE-2024-4351themeum · CVSS 8.8 · 1.0% likely

   CWE-89

4. WordPress Tutor LMS Plugin <= 2.1.10 is vulnerable to SQL InjectionCVE-2023-25700Themeum · CVSS 8.2 · 0.8% likely

   CWE-89

5. WordPress Tutor LMS Plugin <= 2.2.0 is vulnerable to SQL InjectionCVE-2023-25800Themeum · CVSS 8.1 · 0.7% likely

   CWE-89

6. WordPress Tutor LMS Plugin <= 2.1.10 is vulnerable to SQL InjectionCVE-2023-25990Themeum · CVSS 7.1 · 0.7% likely

   CWE-89

7. WordPress Tutor LMS plugin <= 2.7.1 - SQL Injection vulnerabilityCVE-2024-37256Themeum · CVSS 7.6 · 0.6% likely

   CWE-89

8. Tutor LMS <= 4.0.0 - Authenticated (Subscriber+) SQL Injection via Stored Quiz Answer ArrayCVE-2026-15022themeum · CVSS 6.5 · 0.6% likely

   CWE-89

9. Tutor LMS <= 3.9.6 - Unauthenticated SQL Injection via coupon_codeCVE-2025-13673themeum · CVSS 7.5 · 0.5% likely

   CWE-89

10. Tutor LMS <= 2.7.0 - Authenticated (Instructor+) SQL InjectionCVE-2024-4318themeum · CVSS 8.8 · 0.5% likely

    CWE-89

11. Tutor LMS <= 3.9.8 - Authenticated (Admin+) SQL Injection via 'date' ParameterCVE-2026-6080themeum · CVSS 6.5 · 0.5% likely

    CWE-89

12. Tutor LMS – eLearning and online course solution <= 2.7.1 -Authenticated (Administrator+) SQL InjectionCVE-2024-4902themeum · CVSS 7.2 · 0.5% likely

    CWE-89

13. Tutor LMS <= 3.9.11 - Authenticated (Administrator+) SQL Injection via 'data' ParameterCVE-2026-10736themeum · CVSS 4.9 · 0.5% likely

    CWE-89

14. Tutor LMS <= 4.0.1 - Authenticated (Administrator+) SQL Injection via 'coupon_code' ParameterCVE-2026-15444themeum · CVSS 4.9 · 0.5% likely

    CWE-89

15. WP Crowdfunding <= 2.2.1 - Authenticated (Shop Manager+) SQL Injection via 'wpneo_reward' Post MetaCVE-2026-19944themeum · CVSS 4.9 · 0.4% likely

    CWE-89

16. WordPress Tutor LMS plugin <= 2.7.2 - SQL Injection vulnerabilityCVE-2024-43282Themeum · CVSS 7.6 · 0.4% likely

    CWE-89

17. WordPress Kirki plugin <= 6.0.12 - SQL Injection vulnerabilityCVE-2026-57726Themeum · CVSS 9.3 · 0.4% likely

    CWE-89

18. Tutor LMS Pro – eLearning and online course solution <= 3.7.0 - Authenticated (Tutor Instructor+) SQL InjectionCVE-2025-6184themeum · CVSS 8.8 · 0.4% likely

    CWE-89

19. WordPress WP Mega Menu plugin <= 1.4.2 - SQL Injection vulnerabilityCVE-2026-92465Themeum · CVSS 7.6 · 0.4% likely

    CWE-89

20. WordPress Tutor LMS Pro plugin <= 3.9.6 - SQL Injection vulnerabilityCVE-2026-22332Themeum · CVSS 9.3 · 0.3% likely

    CWE-89

21. WordPress Tutor LMS Plugin <= 3.7.4 - SQL Injection VulnerabilityCVE-2025-58993Themeum · CVSS 7.6 · 0.3% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.