Advisories · Technology
Mojoomla School Management.
Every CVE that names Mojoomla School Management among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
WordPress School Management plugin <= 93.1.0 - Insecure Direct Object References (IDOR) vulnerability
- Mojoomla School Management
- Broken access control
- CVSS 8.8 High
WordPress School Management plugin <= 93.2.0 - Privilege Escalation vulnerability
- Mojoomla School Management
- Privilege escalation
- CVSS 7.6 High
WordPress School Management plugin <= 93.2.0 - SQL Injection vulnerability
- Mojoomla School Management
- SQL injection
- CVSS 9.9 CriticalCritical · CVSS 9+
WordPress School Management Plugin <= 1.93.1 (02-07-2025) - Arbitrary File Upload Vulnerability
- Mojoomla School Management
- Unrestricted file upload
- CVSS 6.5 Medium
WordPress School Management Plugin <= 93.2.0 - Broken Access Control Vulnerability
- Mojoomla School Management
- Broken access control
- CVSS 7.1 High
WordPress School Management System Plugin <= 92.0.0 - Reflected Cross Site Scripting (XSS) vulnerability
- mojoomla School Management
- Cross-site scripting (XSS)
- CVSS 7.5 High
WordPress School Management <= 93.0.0 - Local File Inclusion Vulnerability
- mojoomla School Management
- File inclusion
- CVSS 9.3 CriticalCritical · CVSS 9+
WordPress School Management System Plugin <= 92.0.0 - SQL Injection vulnerability
- mojoomla School Management
- SQL injection
- CVSS 8.5 High
WordPress School Management plugin <= 92.0.0 - SQL Injection vulnerability
- mojoomla School Management
- SQL injection
- CVSS 7.1 High
WordPress School Management System for Wordpress plugin <= 92.0.0 - Reflected Cross Site Scripting (XSS) vulnerability
- mojoomla School Management
- Cross-site scripting (XSS)