---
id: CVE-2026-85570
title: Tutor LMS 1.6.4 - 4.1.3 - Subscriber+ Quiz Answer Key Disclosure
summary: >-
  The Tutor LMS  WordPress plugin before 4.2.0 does not prevent the correct
  answers to quiz questions from being included in the page it serves to the
  student taking the quiz, and does so regardless of the setting intended to
  control wheth…
severity: medium
cvss: 4.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N'
cvssSource: adp
cwe:
  - CWE-200
product: Tutor LMS
affected:
  - tutor_lms >= 1.6.4 < 4.2.0
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T11:52:02.598760Z'
published: '2026-11-05'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T12:05:06.056Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-85570'
references:
  - url: 'https://wpscan.com/vulnerability/797ac2aa-50f8-4abd-8ec0-96254b1fe13c/'
tags:
  - cve.org
epss: 0.00176
epssPercentile: 0.07177
ingestedAt: '2026-11-05T21:36:00.779Z'
---

## Overview

The Tutor LMS  WordPress plugin before 4.2.0 does not prevent the correct answers to quiz questions from being included in the page it serves to the student taking the quiz, and does so regardless of the setting intended to control whether answers are revealed, allowing any enrolled student to obtain them before submitting their attempt.

## Affected

- `tutor_lms >= 1.6.4 < 4.2.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.