A vulnerability described as critical has been identified in Tutor LMS Plugin up to 3.9.4/3.9.6 on WordPress. The impacted element is an unknown function. The manipulation of the argument coupon_code results in sql injection.
This vulnerability is cataloged as CVE-2025-13673. The attack may be launched remotely. There is no exploit available.
