WordSec
WordSec

School Management System for Wordpress

Explore School Management System for Wordpress vulnerabilities across all versions. Currently tracking 21 known vulnerabilities, including severity, impact, and patch status.

01234567891026.09.2017Today26.09.20178.8Mojoomla School Management System (Unspecified Version) - Authenticated (Student+) SQL Injection CVSS 8.8 · 26.09.201713.07.20198.8School Management System for Wordpress <= 56.0 - Cross-Site Request Forgery CVSS 8.8 · 13.07.201922.11.20248.8School Management <= 91.5.0 - Authenticated (Student+) Arbitrary File Upload CVSS 8.8 · 22.11.20249.8School Management <= 91.5.0 - Unauthenticated Arbitrary File Upload CVSS 9.8 · 22.11.202406.03.20256.5School Management System for Wordpress <= 92.0.0 - Authenticated (Subscriber+) SQL Injection via 'mj_smgt_show_event_task' CVSS 6.5 · 06.03.20258.8School Management System for Wordpress <= 93.0.0 - Authenticated (Student+) Account Takeover and Privilege Escalation CVSS 8.8 · 06.03.20256.5School Management System for Wordpress <= 92.0.0 - Authenticated (Student+) SQL Injection via 'view-attendance' CVSS 6.5 · 06.03.20255.3School Management System for Wordpress <= 93.0.0 - Missing Authorization to Unauthenticated Arbitrary Post Deletion CVSS 5.3 · 06.03.20255.3School Management System for Wordpress <= 93.0.0 - Reflected Cross-Site Scripting CVSS 5.3 · 06.03.202520.05.20256.1School Management <= 92.0.0 - Reflected Cross-Site Scripting CVSS 6.1 · 20.05.20256.5School Management <= 92.0.0 - Authenticated (Subscriber+) SQL Injection CVSS 6.5 · 20.05.202511.06.20257.5School Management <= 92.0.0 - Unauthenticated SQL Injection CVSS 7.5 · 11.06.202512.06.20258.8School Management <= 93.0.0 - Authenticated (Student+) Local File Inclusion CVSS 8.8 · 12.06.202518.06.20256.1School Management <= 92.0.0 - Reflected Cross-Site Scripting CVSS 6.1 · 18.06.202517.07.20258.8School Management System for Wordpress <= 93.1.0 - Authenticated (Subscriber+) Local File Inclusion to Privilege Escalation via Password Update CVSS 8.8 · 17.07.202512.08.20259.8School Management <= 1.93.1 (02-07-2025) - Authenticated (Student+) Arbitrary File Upload CVSS 9.8 · 12.08.202515.08.20254.3School Management <= 93.2.0 - Missing Authorization CVSS 4.3 · 15.08.20256.5School Management <= 93.2.0 - Authenticated (Support staff+) SQL Injection CVSS 6.5 · 15.08.20255.3School Management <= 93.1.0 - Unauthenticated Insecure Direct Object Reference CVSS 5.3 · 15.08.20258.8School Management System <= 93.2.0 - Authenticated (Student+) Arbitrary File Upload CVSS 8.8 · 15.08.20257.5School Management System for Wordpress <= 93.2.0 - Unauthenticated SQL Injection CVSS 7.5 · 15.08.2025

Strategic Overview

Avg CVSSHigh
7.4/ 10
Patch Coverage29%
Open

15

Fixed

6

Get automatic notifications for all School Management System for Wordpress vulnerabilities before they are exploited.

Vulnerability Records

21 records
2025-08-15 14:57
School Management System for Wordpress <= 93.2.0 - Unauthenticated SQL Injection
School Management System for Wordpress
<= 93.2.0
CVE-2024-12612
7.5
High
Lucio SáNo
2025-08-15 14:56
School Management System <= 93.2.0 - Authenticated (Student+) Arbitrary File Upload
School Management System for Wordpress
<= 93.2.0
CVE-2025-6079
8.8
High
FoxyyyNo
2025-08-15 00:00
School Management <= 93.2.0 - Missing Authorization
School Management System for Wordpress
<= 93.2.0
CVE-2025-48108
4.3
Medium
Nguyen Kim SangNo
2025-08-15 00:00
School Management <= 93.2.0 - Authenticated (Support staff+) SQL Injection
School Management System for Wordpress
<= 93.2.0
CVE-2025-49898
6.5
Medium
Thái AnNo
2025-08-15 00:00
School Management <= 93.1.0 - Unauthenticated Insecure Direct Object Reference
School Management System for Wordpress
<= 93.1.0
CVE-2025-49896
5.3
Medium
Tran Nguyen Bao KhanhNo
2025-08-12 00:00
School Management <= 1.93.1 (02-07-2025) - Authenticated (Student+) Arbitrary File Upload
School Management System for Wordpress
*
CVE-2025-31100
9.8
Critical
BondsNo
2025-07-17 00:00
School Management System for Wordpress <= 93.1.0 - Authenticated (Subscriber+) Local File Inclusion to Privilege Escalation via Password Update
School Management System for Wordpress
<= 93.1.0
CVE-2025-3740
8.8
High
Thái AnYes
2025-06-18 00:00
School Management <= 92.0.0 - Reflected Cross-Site Scripting
School Management System for Wordpress
<= 92.0.0
CVE-2025-47574
6.1
Medium
BondsNo
2025-06-12 00:00
School Management <= 93.0.0 - Authenticated (Student+) Local File Inclusion
School Management System for Wordpress
<= 93.0.0
CVE-2025-47572
8.8
High
AnnnNo
2025-06-11 00:00
School Management <= 92.0.0 - Unauthenticated SQL Injection
School Management System for Wordpress
<= 92.0.0
CVE-2025-47573
7.5
High
BondsNo
Showing 1–10 of 21 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C