VULNERABILITY INTELLIGENCE

CVE-2021-24186

CVSS score6.5 MEDIUM

EPSS probability1.25%

CISA KEVNot currently listed

Published2021-04-05

Last modified2026-06-17

Description

The tutor_answering_quiz_question/get_answer_by_id function pair from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.8.3 was vulnerable to UNION based SQL injection that could be exploited by students.