Plugin icon

School Management System

school-management

Vulnerabilities:

19

Last Updated:

July 11, 2025

Active Installs:

n/a

Published
Title
Fixed in
CVSS
Published
2025-08-15
Title
School Management System for Wordpress <= 93.2.0 - Unauthenticated SQL Injection
Fixed in
No known fix
CVSS
7.5 (high)
Published
2025-08-15
Title
School Management System <= 93.2.0 - Authenticated (Student+) Arbitrary File Upload
Fixed in
No known fix
CVSS
8.8 (high)
Published
2025-08-15
Title
School Management <= 93.2.0 - Authenticated (Support staff+) SQL Injection
Fixed in
No known fix
CVSS
6.5 (medium)
Published
2025-08-15
Title
School Management <= 93.2.0 - Missing Authorization
Fixed in
No known fix
CVSS
4.3 (medium)
Published
2025-08-15
Title
School Management <= 93.1.0 - Unauthenticated Insecure Direct Object Reference
Fixed in
No known fix
CVSS
5.3 (medium)
Published
2025-07-17
Title
School Management System for Wordpress < 1.93.1 (02-07-2025) - Authenticated (Subscriber+) Local File Inclusion to Privilege Escalation via Password Update
Fixed in
Fixed in 1.93.1 (02-07-2025)
CVSS
8.8 (high)
Published
2025-06-18
Title
School Management <= 92.0.0 - Reflected Cross-Site Scripting
Fixed in
No known fix
CVSS
6.1 (medium)
Published
2025-06-12
Title
School Management <= 93.0.0 - Authenticated (Student+) Local File Inclusion
Fixed in
No known fix
CVSS
8.8 (high)
Published
2025-06-11
Title
School Management <= 92.0.0 - Unauthenticated SQL Injection
Fixed in
No known fix
CVSS
7.5 (high)
Published
2025-05-20
Title
School Management <= 92.0.0 - Authenticated (Subscriber+) SQL Injection
Fixed in
No known fix
CVSS
6.5 (medium)
Published
2025-05-20
Title
School Management <= 92.0.0 - Reflected Cross-Site Scripting
Fixed in
No known fix
CVSS
6.1 (medium)
Published
2025-03-06
Title
School Management System for Wordpress < 93.0.0 - Authenticated (Subscriber+) SQL Injection via 'mj_smgt_show_event_task'
Fixed in
Fixed in 93.0.0
CVSS
6.5 (medium)
Published
2025-03-06
Title
School Management System for Wordpress <= 93.0.0 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
Fixed in
No known fix
CVSS
5.3 (medium)
Published
2025-03-06
Title
School Management System for Wordpress <= 93.0.0 - Student+ Account Takeover and Privilege Escalation
Fixed in
No known fix
CVSS
8.8 (high)
Published
2025-03-06
Title
School Management System for Wordpress <= 93.0.0 - Reflected Cross-Site Scripting
Fixed in
No known fix
CVSS
5.3 (medium)
Published
2025-03-06
Title
School Management System for Wordpress < 93.0.0 - Authenticated (Student+) SQL Injection via 'view-attendance'
Fixed in
Fixed in 93.0.0
CVSS
6.5 (medium)
Published
2024-11-22
Title
School Management < 92.0.0 - Unauthenticated Arbitrary File Upload
Fixed in
Fixed in 92.0.0
CVSS
9.8 (critical)
Published
2024-11-22
Title
School Management < 92.0.0 - Authenticated (Student+) Arbitrary File Upload
Fixed in
Fixed in 92.0.0
CVSS
8.8 (high)
Published
2019-07-11
Title
School Management < 57.0 - CSRF and Stored XSS
Fixed in
Fixed in 57.0
CVSS
n/a