WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
school-management
Published
2024-11-22
Title
School Management < 92.0.0 - Unauthenticated Arbitrary File Upload
Slug
school-management
Published
2025-03-06
Title
School Management System for Wordpress < 93.0.0 - Authenticated (Subscriber+) SQL Injection via 'mj_smgt_show_event_task'
Slug
school-management
Published
2025-03-06
Title
School Management System for Wordpress <= 93.0.0 - Reflected Cross-Site Scripting
Slug
school-management
Published
2025-03-06
Title
School Management System for Wordpress <= 93.0.0 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
Slug
school-management
Published
2025-03-06
Title
School Management System for Wordpress < 93.0.0 - Authenticated (Student+) SQL Injection via 'view-attendance'
Slug
school-management
Published
2025-03-06
Title
School Management System for Wordpress <= 93.0.0 - Student+ Account Takeover and Privilege Escalation
Slug
school-management
Published
2025-05-20
Title
School Management <= 92.0.0 - Reflected Cross-Site Scripting
Slug
school-management
Published
2025-05-20
Title
School Management <= 92.0.0 - Authenticated (Subscriber+) SQL Injection
Slug
school-management
Published
2025-06-12
Title
School Management <= 93.0.0 - Authenticated (Student+) Local File Inclusion
Slug
school-management
Published
2025-06-11
Title
School Management <= 92.0.0 - Unauthenticated SQL Injection
Slug
school-management
Published
2025-06-18
Title
School Management <= 92.0.0 - Reflected Cross-Site Scripting
Slug
school-management
Published
2025-07-17
Title
School Management System for Wordpress < 1.93.1 (02-07-2025) - Authenticated (Subscriber+) Local File Inclusion to Privilege Escalation via Password Update
Slug
school-management
Published
2025-08-15
Title
School Management System for Wordpress <= 93.2.0 - Unauthenticated SQL Injection
Slug
school-management
Published
2025-08-15
Title
School Management System <= 93.2.0 - Authenticated (Student+) Arbitrary File Upload
Slug
school-management
Published
2025-08-15
Title
School Management <= 93.2.0 - Authenticated (Support staff+) SQL Injection
Slug
school-management
Published
2025-08-15
Title
School Management <= 93.1.0 - Unauthenticated Insecure Direct Object Reference
Slug
school-management
Published
2025-08-15
Title
School Management <= 93.2.0 - Missing Authorization
Slug
school-management-pro
Published
2022-05-18
Title
The School Management < 9.9.7 - Unauthenticated RCE via REST api
Slug
school-management-pro
Published
2024-04-29
Title
School Management Pro <= 10.3.4 - Authenticated (School Admin+) SQL Injection
Slug
school-management-system
Published
2023-04-19
Title
The School Management < 4.2 - Admin+ SQLi
Slug
schreikasten
Published
2014-08-01
Title
Schreikasten 0.14.13 - wp-admin/admin-ajax.php Multiple Parameter XSS
Slug
schreikasten
Published
2021-10-07
Title
Schreikasten <= 0.14.18 - Author+ SQL Injections
Slug
scorerender
Published
2014-08-01
Title
scorerender <= 0.3.4 - XSS in ZeroClipboard
Slug
scormcloud
Published
2014-08-01
Title
SCORM Cloud < 1.0.7 - SQL Injection
Slug
scottcart
Published
2024-10-25
Title
ScottCart <= 1.1 - Unauthenticated Remote Code Execution