CVE-2026-6080 | themeum Tutor LMS Plugin up to 3.9.8 on WordPress prepare Date sql injection

A vulnerability was found in themeum Tutor LMS Plugin up to 3.9.8 on WordPress. It has been rated as critical. The affected element is the function prepare. The manipulation of the argument Date leads to sql injection.

This vulnerability is documented as CVE-2026-6080. The attack can be initiated remotely. There is not any exploit available.