CVE

CVE-2026-3360 — Tutor LMS < 3.9.8 - Unauthenticated Arbitrary Billing Profile Overwrite via 'order_id'

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-3360 Tutor LMS < 3.9.8 - Unauthenticated Arbitrary Billing Profile Overwrite via 'order_id' Unknown < 3.9.8 3.9.8

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.