WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
school-management
Published
2025-03-06
Title
School Management System for Wordpress <= 93.0.0 - Student+ Account Takeover and Privilege Escalation
Slug
school-management
Published
2025-05-20
Title
School Management <= 92.0.0 - Reflected Cross-Site Scripting
Slug
school-management
Published
2025-05-20
Title
School Management <= 92.0.0 - Authenticated (Subscriber+) SQL Injection
Slug
school-management
Published
2025-06-12
Title
School Management <= 93.0.0 - Authenticated (Student+) Local File Inclusion
Slug
school-management
Published
2025-06-11
Title
School Management <= 92.0.0 - Unauthenticated SQL Injection
Slug
school-management
Published
2025-06-18
Title
School Management <= 92.0.0 - Reflected Cross-Site Scripting
Slug
school-management
Published
2025-07-17
Title
School Management System for Wordpress < 1.93.1 (02-07-2025) - Authenticated (Subscriber+) Local File Inclusion to Privilege Escalation via Password Update
Slug
school-management
Published
2025-08-15
Title
School Management System for Wordpress <= 93.2.0 - Unauthenticated SQL Injection
Slug
school-management
Published
2025-08-15
Title
School Management System <= 93.2.0 - Authenticated (Student+) Arbitrary File Upload
Slug
school-management
Published
2025-08-15
Title
School Management <= 93.2.0 - Authenticated (Support staff+) SQL Injection
Slug
school-management
Published
2025-08-15
Title
School Management <= 93.1.0 - Unauthenticated Insecure Direct Object Reference
Slug
school-management
Published
2025-08-15
Title
School Management <= 93.2.0 - Missing Authorization
Slug
school-management
Published
2025-08-12
Title
School Management <= 1.93.1 (02-07-2025) - Authenticated (Student+) Arbitrary File Upload
Slug
school-management
Published
2026-08-15
Title
School Management <= 93.1.0 - Unauthenticated Insecure Direct Object Reference
Slug
school-management-pro
Published
2022-05-18
Title
The School Management < 9.9.7 - Unauthenticated RCE via REST api
Slug
school-management-pro
Published
2024-04-29
Title
School Management Pro <= 10.3.4 - Authenticated (School Admin+) SQL Injection
Slug
school-management-system
Published
2023-04-19
Title
The School Management < 4.2 - Admin+ SQLi
Slug
school-management-system
Published
2026-08-15
Title
The School Management < 5.5 - Authenticated (Custom+) SQL Injection via 'order[0][dir]' Parameter
Slug
schreikasten
Published
2014-08-01
Title
Schreikasten 0.14.13 - wp-admin/admin-ajax.php Multiple Parameter XSS
Slug
schreikasten
Published
2021-10-07
Title
Schreikasten <= 0.14.18 - Author+ SQL Injections
Slug
scoreboard-for-html5-game-lite
Published
2026-03-20
Title
Scoreboard for HTML5 Games Lite < 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
scorerender
Published
2014-08-01
Title
scorerender <= 0.3.4 - XSS in ZeroClipboard
Slug
scormcloud
Published
2014-08-01
Title
SCORM Cloud < 1.0.7 - SQL Injection
Slug
scottcart
Published
2024-10-25
Title
ScottCart <= 1.1 - Unauthenticated Remote Code Execution
Slug
scoutnet-kalender
Published
2019-12-10
Title
Scoutnet Kalender <= 1.1.0 - Stored Cross-Site Scripting (XSS)