LoginSign Up
← Back to all sparks
T

Tutor LMS

EDTECH
Velocity5.0

WordPress-based learning management system plugin with course builder, quizzes, and student management for online educators.

tutorlms.com ↗

Tutor LMS locks down its REST API as feature work resumes

wordpress-lmsrest-apisecurityquizzesperformancepro-tier
◆Current state
Tutor LMS has moved past post-rewrite patches into a 4.x feature line. v4.1.0 added negative and partial quiz marking and WordPress AI Connector support, and v4.2.0 adds REST API access tokens, endpoint-level authorization and enforced key permissions. The same release fixes unauthorized REST access to course content, quiz answers, attempts and user details, and verifies Reveal Mode answers on the server.
◆Where it's heading
The capability surface has started moving again after the flat period that followed 4.0, and API trust is the main theme. A REST layer that returned quiz answers and user details without proper checks needed this repair before anyone could safely build on it. Performance work on analytics, orders and the instructor dashboard runs alongside, across nearly every release since 4.0.8.
◆Prediction
With token authentication in place, wider REST coverage is the natural next step. Quiz depth is the other live thread, given the marking and verification work in the last two feature releases.

◆Recent moves

  1. 4d ago

    v4.2.1 fixes paused-course enrollment and earnings filters

    A patch after the 4.2.0 REST API work: students can no longer enroll in paused courses, earnings report filters work again, and content no longer vanishes when leaving a page builder. Plus WPML compatibility and an unspecified security fix.

    View source ↗
  2. 17d ago

    v4.2.0: REST API tokens and fixes for unauthorized access

    v4.2.0 adds token authentication and per-endpoint authorization to the REST API and fixes unauthorized access to course content, quiz answers and user details. It is as much a security repair as a feature release, and sites exposing the API should treat it that way.

    View source ↗
  3. 1mo ago

    v4.1.1: Orders query tuning and payment input validation

    SQL optimization for Orders and Analytics and added input validation on payment and withdrawal settings. A small patch following the 4.1.0 feature release.

    View source ↗
  4. 1mo ago

    v4.1.0: partial and negative quiz marking, AI Connector

    Negative and partial quiz marking, a Cart button for themes and WordPress AI Connector integration with Tutor AI Studio. This is the first feature release after the flat 4.0 patch run.

    View source ↗
  5. 1mo ago

    Performance and security update, labeled v4.9.0

    A single line on performance and security, with no specifics. The 4.9.0 label sits between 4.0.8 and 4.1.0, so the number looks like a labeling error.

    View source ↗
  6. 2mo ago

    v4.0.8: dashboard layout options and dual-mode logos

    Dashboard header and footer controls, separate light and dark logos and better quiz attempt views. The first release in this stretch to give instructors new options rather than only fixes.

    View source ↗