What’s Vulnerable › Products

dasinfomedia School Management System for Wordpress vulnerabilities

11 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.

Check whether your dasinfomedia School Management System for Wordpress version is affected

Latest dasinfomedia School Management System for Wordpress vulnerabilities

• CVE-2025-6079 — School Management System <= 93.2.0 - Authenticated (Student+) Arbitrary File Upload (CVSS 8.8)
• CVE-2024-12612 — School Management System for Wordpress <= 93.2.0 - Unauthenticated SQL Injection (CVSS 7.5)
• CVE-2025-3740 — School Management System for Wordpress <= 93.1.0 - Authenticated (Subscriber+) Local File Inclusion to Privilege Escalation via Password Update (CVSS 8.8)
• CVE-2024-9658 — School Management System for Wordpress <= 93.0.0 - Authenticated (Student+) Account Takeover and Privilege Escalation (CVSS 8.8)
• CVE-2024-12611 — School Management System for Wordpress <= 93.0.0 - Reflected Cross-Site Scripting (CVSS 5.3)
• CVE-2024-12610 — School Management System for Wordpress <= 93.0.0 - Missing Authorization to Unauthenticated Arbitrary Post Deletion (CVSS 5.3)
• CVE-2024-12609 — School Management System for Wordpress <= 92.0.0 - Authenticated (Student+) SQL Injection via 'view-attendance' (CVSS 6.5)
• CVE-2024-12607 — School Management System for Wordpress <= 92.0.0 - Authenticated (Subscriber+) SQL Injection via 'mj_smgt_show_event_task' (CVSS 6.5)
• CVE-2024-9660 — School Management <= 91.5.0 - Authenticated (Student+) Arbitrary File Upload (CVSS 8.8)
• CVE-2024-9659 — School Management <= 91.5.0 - Unauthenticated Arbitrary File Upload (CVSS 9.8)
• CVE-2017-14843 — (CVSS 8.8)