CVE-2025-13935 | Tutor LMS Plugin up to 3.9.3 on WordPress mark_course_complete authorization

A vulnerability described as critical has been identified in Tutor LMS Plugin up to 3.9.3 on WordPress. This issue affects the function mark_course_complete. The manipulation results in missing authorization.

This vulnerability is reported as CVE-2025-13935. The attack can be launched remotely. No exploit exists.