What’s Vulnerable › Products

jdsofttech School Management System – WPSchoolPress vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your jdsofttech School Management System – WPSchoolPress version is affected

Latest jdsofttech School Management System – WPSchoolPress vulnerabilities

• CVE-2025-11981 — School Management System – WPSchoolPress <= 2.2.23 - Authenticated (Administrator+) SQL Injection (CVSS 4.9)
• CVE-2025-1670 — School Management System – WPSchoolPress <= 2.2.16 - Authenticated (Parent+) SQL Injection (CVSS 6.5)
• CVE-2025-1669 — School Management System – WPSchoolPress <= 2.2.17 - Authenticated (Teacher+) SQL Injection (CVSS 6.5)
• CVE-2025-1668 — School Management System – WPSchoolPress <= 2.2.16 - Missing Authorization to Arbitrary User Deletion (CVSS 5.4)
• CVE-2025-1667 — School Management System – WPSchoolPress <= 2.2.16 - Missing Authorization to Privilege Escalation via Account Takeover (CVSS 4.3)
• CVE-2024-12332 — School Management System – WPSchoolPress <= 2.2.14 - Authenticated (Student/Parent+) SQL Injection (CVSS 6.5)
• CVE-2024-9637 — School Management System – WPSchoolPress <= 2.2.10 - Insecure Direct Object Reference to Authenticated (Teacher+) Account Takeover/Privilege Escalation (CVSS 8.8)
• CVE-2023-4776 — WPSchoolPress < 2.2.5 - Teacher+ SQLi (CVSS 8.8)
• CVE-2021-24664 — WPSchoolPress < 2.1.17 - Multiple Admin+ Stored Cross-Site Scripting (CVSS 4.8)
• CVE-2021-24575 — WPSchoolPress < 2.1.10 - Multiple Authenticated SQL Injections (CVSS 8.8)