← WordPress Vulnerabilities
WordPress security by component

School Management

School Management is a WordPress component with 11 published CVE records in this archive. The latest tracked vulnerability was published Jun 17, 2026; the highest CVE/CNA score is 9.9.

Plugin slug: school-management

CVE-2025-15657: School Management: A security weakness

School Management is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is n/a through 93.1.0.

PublishedJun 17, 2026
Known safe version> 93.1.0
Safe version
Jun 17, 2026 CVE-2025-15657
School Management: A security weakness
School Management is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is n/a through 93.1.0.
> 93.1.0
CVE5.3
NVDPending
Jun 03, 2026 CVE-2025-15656
School Management: Privilege escalation or authentication bypass
School Management is affected by privilege escalation or authentication bypass. Exposure depends on how the affected operation is made reachable by the site. A successful request can grant permissions or access that the caller should not possess. The published affected range is n/a through 93.2.0.
> 93.2.0
CVE8.8
NVDPending
Jun 03, 2026 CVE-2025-15655
School Management: SQL injection
School Management is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data. The published affected range is n/a through 93.2.0.
> 93.2.0
CVE7.6
NVDPending
Aug 31, 2025 CVE-2025-31100
School Management: Dangerous file upload
School Management is affected by dangerous file upload. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.
See mitigation notes
CVE9.9
NVDPending
Aug 26, 2025 CVE-2025-48108
School Management: A security weakness
School Management is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE6.5
NVDPending
Jun 27, 2025 CVE-2025-47574
School Management: Cross-site scripting
School Management is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE7.1
NVDPending
Jun 17, 2025 CVE-2025-47573
School Management: SQL injection
School Management is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE9.3
NVDPending
Jun 17, 2025 CVE-2025-47572
School Management: Filesystem traversal
School Management is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.
See mitigation notes
CVE7.5
NVDPending
May 23, 2025 CVE-2025-47613
School Management: Cross-site scripting
School Management is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE7.1
NVDPending
May 23, 2025 CVE-2025-47575
School Management: SQL injection
School Management is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE8.5
NVDPending
Jan 16, 2024 CVE-2022-1609
School Management: A security weakness
School Management is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE9.8
NVD9.8