Medium severity4.3NVD Advisory· Published Oct 25, 2025· Updated Jun 17, 2026

CVE-2025-6680

Description

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.8.3. This makes it possible for authenticated attackers, with tutor-level access and above, to view assignments for courses they don't teach which may contain sensitive information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Themeum/Tutor Lms
cpe:2.3:a:themeum:tutor_lms:*:*:*:*:free:wordpress:*:*
Range: <3.9.0
WordPress/Tutor Lmsllm-fuzzy
Range: <=3.8.3
themeum/Tutor LMS – eLearning and online course solutionv5
Range: 0
WordPress/Tutor LMS Prowp-canonicalize

Patches

Vulnerability mechanics

References

plugins.trac.wordpress.org/changeset/3382577/tutor/trunk/templates/dashboard/assignments/review.phpnvdPatch
www.wordfence.com/threat-intel/vulnerabilities/id/1b8d88e4-a9dc-4740-b836-99f730beefcbnvdProductThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000