WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
schema-app-structured-data-for-schemaorg
Published
2023-09-27
Title
Schema App Structured Data < 1.22.4 - Missing Authorization via page_init
Slug
schema-app-structured-data-for-schemaorg
Published
2024-05-23
Title
Schema App Structured Data < 2.2.1 - Missing Authorization
Slug
schema-app-structured-data-for-schemaorg
Published
2024-06-13
Title
Schema App Structured Data < 2.2.1 - Cross-Site Request Forgery
Slug
schema-app-structured-data-for-schemaorg
Published
2024-12-11
Title
Schema App Structured Data < 2.2.5 - Reflected Cross-Site Scripting
Slug
schema-scalpel
Published
2025-10-31
Title
Schema Scalpel < 1.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title in JSON-LD Schema
Slug
schema-shortcode
Published
2026-03-20
Title
Schema Shortcode <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
school-management
Published
2019-07-11
Title
School Management < 57.0 - CSRF and Stored XSS
Slug
school-management
Published
2024-11-22
Title
School Management < 92.0.0 - Authenticated (Student+) Arbitrary File Upload
Slug
school-management
Published
2024-11-22
Title
School Management < 92.0.0 - Unauthenticated Arbitrary File Upload
Slug
school-management
Published
2025-03-06
Title
School Management System for Wordpress < 93.0.0 - Authenticated (Subscriber+) SQL Injection via 'mj_smgt_show_event_task'
Slug
school-management
Published
2025-03-06
Title
School Management System for Wordpress <= 93.0.0 - Reflected Cross-Site Scripting
Slug
school-management
Published
2025-03-06
Title
School Management System for Wordpress <= 93.0.0 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
Slug
school-management
Published
2025-03-06
Title
School Management System for Wordpress < 93.0.0 - Authenticated (Student+) SQL Injection via 'view-attendance'
Slug
school-management
Published
2025-03-06
Title
School Management System for Wordpress <= 93.0.0 - Student+ Account Takeover and Privilege Escalation
Slug
school-management
Published
2025-05-20
Title
School Management <= 92.0.0 - Reflected Cross-Site Scripting
Slug
school-management
Published
2025-05-20
Title
School Management <= 92.0.0 - Authenticated (Subscriber+) SQL Injection
Slug
school-management
Published
2025-06-12
Title
School Management <= 93.0.0 - Authenticated (Student+) Local File Inclusion
Slug
school-management
Published
2025-06-11
Title
School Management <= 92.0.0 - Unauthenticated SQL Injection
Slug
school-management
Published
2025-06-18
Title
School Management <= 92.0.0 - Reflected Cross-Site Scripting
Slug
school-management
Published
2025-07-17
Title
School Management System for Wordpress < 1.93.1 (02-07-2025) - Authenticated (Subscriber+) Local File Inclusion to Privilege Escalation via Password Update
Slug
school-management
Published
2025-08-15
Title
School Management System for Wordpress <= 93.2.0 - Unauthenticated SQL Injection
Slug
school-management
Published
2025-08-15
Title
School Management System <= 93.2.0 - Authenticated (Student+) Arbitrary File Upload
Slug
school-management
Published
2025-08-15
Title
School Management <= 93.2.0 - Authenticated (Support staff+) SQL Injection
Slug
school-management
Published
2025-08-15
Title
School Management <= 93.1.0 - Unauthenticated Insecure Direct Object Reference
Slug
school-management
Published
2025-08-15
Title
School Management <= 93.2.0 - Missing Authorization