WordPress security by component
WPSchoolPress
Plugin description
WPSchoolPress is a WordPress component with 12 published CVE records in this archive. The latest tracked vulnerability was published Apr 08, 2026; the highest CVE/CNA score is 8.8.
Plugin slug:
wpschoolpressLatest vulnerability
CVE-2026-39631: WPSchoolPress: A security weakness
WPSchoolPress is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 2.2.35.
| Safe version |
|
||
|---|---|---|---|
| Apr 08, 2026 |
CVE-2026-39631
WPSchoolPress: A security weakness
WPSchoolPress is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 2.2.35.
|
> 2.2.35 |
CVE4.9
NVDPending
|
| Nov 14, 2025 |
CVE-2025-11981
School Management System – WPSchoolPress: SQL injection
School Management System – WPSchoolPress is affected by SQL injection. Exploitation requires at least administrator-level access. A successful request can alter database queries and expose or modify WordPress data.
|
See mitigation notes |
CVE4.9
NVDPending
|
| Mar 15, 2025 |
CVE-2025-1670
School Management System – WPSchoolPress: SQL injection
School Management System – WPSchoolPress is affected by SQL injection. Exploitation requires an authenticated WordPress account. A successful request can alter database queries and expose or modify WordPress data.
|
See mitigation notes |
CVE6.5
NVD6.5
|
| Mar 15, 2025 |
CVE-2025-1669
School Management System – WPSchoolPress: SQL injection
School Management System – WPSchoolPress is affected by SQL injection. Exploitation requires an authenticated WordPress account. A successful request can alter database queries and expose or modify WordPress data.
|
See mitigation notes |
CVE6.5
NVD6.5
|
| Mar 15, 2025 |
CVE-2025-1668
School Management System – WPSchoolPress: A security weakness
School Management System – WPSchoolPress is affected by a security weakness. Exploitation requires an authenticated WordPress account. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE4.3
NVD5.4
|
| Mar 15, 2025 |
CVE-2025-1667
School Management System – WPSchoolPress: Privilege escalation or authentication bypass
School Management System – WPSchoolPress is affected by privilege escalation or authentication bypass. Exploitation requires an authenticated WordPress account. A successful request can grant permissions or access that the caller should not possess.
|
See mitigation notes |
CVE8.8
NVD4.3
|
| Jan 07, 2025 |
CVE-2024-12332
School Management System – WPSchoolPress: SQL injection
School Management System – WPSchoolPress is affected by SQL injection. Exploitation requires an authenticated WordPress account. A successful request can alter database queries and expose or modify WordPress data.
|
See mitigation notes |
CVE6.5
NVDPending
|
| Dec 13, 2024 |
CVE-2023-37887
WPSchoolPress: A security weakness
WPSchoolPress is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE6.5
NVDPending
|
| Oct 26, 2024 |
CVE-2024-9637
School Management System – WPSchoolPress: Privilege escalation or authentication bypass
School Management System – WPSchoolPress is affected by privilege escalation or authentication bypass. Exploitation requires an authenticated WordPress account. A successful request can grant permissions or access that the caller should not possess.
|
See mitigation notes |
CVE8.8
NVDPending
|
| Oct 16, 2023 |
CVE-2023-4776
School Management System: SQL injection
School Management System is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
|
See mitigation notes |
CVE8.8
NVD8.8
|
| Nov 08, 2021 |
CVE-2021-24664
School Management System – WPSchoolPress: Cross-site scripting
School Management System – WPSchoolPress is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE4.8
NVD4.8
|
| Nov 08, 2021 |
CVE-2021-24575
School Management System – WPSchoolPress: SQL injection
School Management System – WPSchoolPress is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
|
See mitigation notes |
CVE8.8
NVD8.8
|