School Management System – WPSchoolPress

Explore School Management System – WPSchoolPress vulnerabilities across all versions. Currently tracking 14 known vulnerabilities, including severity, impact, and patch status.

01234567891001.01.2019Today11.10.20217.1School Management System – WPSchoolPress < 2.1.10 - Reflected Cross-Site Scripting CVSS 7.1 · 11.10.20218.8School Management System – WPSchoolPress <= 2.1.9 - SQL Injection CVSS 8.8 · 11.10.20214.8School Management System – WPSchoolPress <= 2.1.16 - Stored Cross-Site Scripting CVSS 4.8 · 11.10.202111.07.20235.4WPSchoolPress <= 2.2.3 - Missing Authorization CVSS 5.4 · 11.07.202318.09.20236.3WPSchoolPress <= 2.2.4 - Cross-Site Request Forgery CVSS 6.3 · 18.09.202325.09.20237.2WPSchoolPress <= 2.2.4 - Authenticated(Teacher+) SQL Injection via ClassID CVSS 7.2 · 25.09.202325.10.20248.8School Management System – WPSchoolPress <= 2.2.10 - Insecure Direct Object Reference to Authenticated (Teacher+) Account Takeover/Privilege Escalation CVSS 8.8 · 25.10.202406.01.20256.5School Management System – WPSchoolPress <= 2.2.14 - Authenticated (Student/Parent+) SQL Injection CVSS 6.5 · 06.01.202514.03.20258.8School Management System – WPSchoolPress <= 2.2.16 - Missing Authorization to Privilege Escalation via Account Takeover CVSS 8.8 · 14.03.20256.5School Management System – WPSchoolPress <= 2.2.17 - Authenticated (Teacher+) SQL Injection CVSS 6.5 · 14.03.20254.3School Management System – WPSchoolPress <= 2.2.16 - Missing Authorization to Arbitrary User Deletion CVSS 4.3 · 14.03.20256.5School Management System – WPSchoolPress <= 2.2.16 - Authenticated (Parent+) SQL Injection CVSS 6.5 · 14.03.202513.11.20254.9School Management System – WPSchoolPress <= 2.2.23 - Authenticated (Administrator+) SQL Injection CVSS 4.9 · 13.11.202513.02.20264.3WPSchoolPress <= 2.2.36 - Missing Authorization CVSS 4.3 · 13.02.2026

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage93%
Open

1

Fixed

13

Get automatic notifications for all School Management System – WPSchoolPress vulnerabilities before they are exploited.

Vulnerability Records

14 records
2026-02-13 00:00CVE-2026-39631
4.3
Medium
Nabil IrawanNo
2025-11-13 22:05CVE-2025-11981
4.9
Medium
dutafiYes
2025-03-14 14:23CVE-2025-1668
4.3
Medium
wesley (wcraft)Yes
2025-03-14 14:23CVE-2025-1670
6.5
Medium
wesley (wcraft)Yes
2025-03-14 14:22CVE-2025-1667
8.8
High
wesley (wcraft)Yes
2025-03-14 14:22CVE-2025-1669
6.5
Medium
wesley (wcraft)Yes
2025-01-06 16:09CVE-2024-12332
6.5
Medium
shaman0x01Yes
2024-10-25 20:05CVE-2024-9637
8.8
High
wesley (wcraft)Yes
2023-09-25 00:00CVE-2023-4776
7.2
High
Dao Xuan HieuYes
2023-09-18 00:00N/A
6.3
Medium
AnonymousYes
Showing 1–10 of 14 reports
School Management System – WPSchoolPress banner
Latestv2.2.46

School Management System – WPSchoolPress

Ronik@UnlimitedWP

Author

Ronik@UnlimitedWP

4.0(21)
80/100
Last Updated
2026-07-21 (9d ago)
Active Installs
1,000+
Downloads
209,399
Requires WP
6.7+
Requires PHP
7.4+
Tested up to
WP 7.0.2
Created
2019-01-01 (8y ago)

WPSchoolPress is currently a highly demanding WordPress plugin for the school management system in 2025-26. WPSchoolPress is a No.#1 School Management WordPress Plugin allows you to manage entities such as classes, students, sections, exams, timetables, results, ID Cards, teachers, staff, fee management, parent control, invoices, noticeboards, and more. Upgrade your experience with premium add-ons that bring advanced features, automation, and enhanced control to your school management system. Features Role based access:Users like school admin, students, parents and teachers can easily login and access their respective user-friendly dashboards. Student Attendance Management System:Admin and Teachers can do entire attendance management on daily basis of the students of each class. Students and parents can see date wise attendance report. Teacher can also add the reason for absence of each student. Whenever any student is absent, an automatic message is sent to the registered parent mentioning the day, date and reason of being absent. Automatic messages are sent only if the school has purchased our SMS add-on. Class rooms and subjects:As a student managing plugin,WPSchoolPress has made simple for admin to create new classes and assign subjects. Eventually, teacher’s management can be done by assigning subjects and classes. For parents, their child information like class number, respective subjects and assigned teachers can be viewed when they login to their respective dashboards. Student Grade Management System:As student report management system,WPSchoolPress has a feature by which admin and teachers can insert student grades/marks on the bases of their class and subjects. Along with grades, teachers can also write remarks or student-reviews on student’s performance. Subject-wise grades will be visible on students and parent’s dashboards. Using our paid Import-Export add-on, teachers can import a .csv file with grades for quicker upload of marksin bulk. The students and parents can further print grade sheets. School Schedule Management System:Admin and teachers can create exam schedule for each subject of their respective class.Along with this, upcoming school event schedules like cultural festival schedule, sports tournament schedule, annual leaves management and likewise can be easily created. For sudden changes in acedemics, admin can notify teachers, students and parents by sending email-notifications(free) or sending messages through our paid SMS add-on. School Transportation Management System: Details regarding Public Transport bus, tram or School Private transport, routes and driver details can be provided on students, parents and teachers dashboards by admin. Also admin can send notifications in form of e-mail (free) or SMS (with use of paid add-on) to parents if there is a replacement in driver, transport bus, change in route, etc. Constant feature updates:We are constantly trying to have feature updatesfor you to run the school operations smoothly. These updates are on the bases our customer suggestions and feature requirements. Check our website for any new updates and add-ons Enhances the SMS add-on with reusable templates, enabling quick message creation, improved consistency, and reduced manual effort. 2.2.33 Fixed – Fixed issue of default user roles which vanished when plugin activate 2.2.34 Fixed – teacher not able to edit students info. fixed it 2.2.35 Updated – Make Class field mandatory when new student registered or existing student updated Fixed – make validation such that same roll no is not used in same class 2.2.36 *Updated – Improved performance by optimizing AJAX loading, reducing unnecessary DB queries, adding caching. 2.2.37 *Updated – Fixed UI issues and ensured full compatibility with the SMS add-on. 2.2.38 *Updated – Fixed timetable bug. 2.2.39 *Updated – Fixed parent-side marks display bug. 2.2.40 *Updated – Fixed bugs, improved UI, and added validation checks. 2.2.41 *Updated – Created Hooks and made addon related chnages. 2.2.42 *Updated – FIxed bug and Created hooks for Live addon. 2.2.43 *FIxed – Fixed styling issue. 2.2.44 *Updated: Added a Customization Request form, a dedicated Add-ons page, and Appsero deactivation feedback collection. 2.2.45 *Updated: Tested upto wordpress version 7.0 2.2.46 *Updated: Teacher role permission for the addons and Customization request and Menu registration change for the Social-post addon.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C