School Management System for Wordpress

School Management System for Wordpress has 24 disclosed vulnerabilities in the WordSec catalog, reported between 2017 and 2026; 6 are fixed and 18 remain unpatched as of October 2026. Their average CVSS score is 7.2, and the most serious one scores 9.8 out of 10. Severity breakdown: 2 critical and 9 high. 2025 was the busiest year with 19 disclosures.

The most common weakness is Improper Neutralization Of Special Elements Used In An SQL Command, behind 8 of the records (33%). Other recurring categories include Unrestricted Upload Of File With Dangerous Type, Missing Authorization.

6 of the records (25%) have a vendor fix, while 18 remain unpatched. The oldest unresolved one dates back to 2017.

13 independent researchers contributed these findings, most of them (4) reported by Thái An.