What’s Vulnerable › Products

mojoomla School Management vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.

Check whether your mojoomla School Management version is affected

Latest mojoomla School Management vulnerabilities

• CVE-2025-15657 — WordPress School Management plugin <= 93.1.0 - Insecure Direct Object References (IDOR) vulnerability (CVSS 5.3)
• CVE-2025-15656 — WordPress School Management plugin <= 93.2.0 - Privilege Escalation vulnerability (CVSS 8.8)
• CVE-2025-15655 — WordPress School Management plugin <= 93.2.0 - SQL Injection vulnerability (CVSS 7.6)
• CVE-2025-31100 — WordPress School Management Plugin <= 1.93.1 (02-07-2025) - Arbitrary File Upload Vulnerability (CVSS 9.9)
• CVE-2025-48108 — WordPress School Management Plugin <= 93.2.0 - Broken Access Control Vulnerability (CVSS 6.5)
• CVE-2025-47574 — WordPress School Management System Plugin <= 92.0.0 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2025-47573 — WordPress School Management System Plugin <= 92.0.0 - SQL Injection vulnerability (CVSS 9.3)
• CVE-2025-47572 — WordPress School Management <= 93.0.0 - Local File Inclusion Vulnerability (CVSS 7.5)
• CVE-2025-47613 — WordPress School Management System for Wordpress plugin <= 92.0.0 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2025-47575 — WordPress School Management plugin <= 92.0.0 - SQL Injection vulnerability (CVSS 8.5)