Support Us — Your donation helps us keep running

Goal: 1000 CNY，Raised: 1000 CNY

100.0%
Donate Now

School Management System for Wordpress — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in School Management System for Wordpress, with AI-generated Chinese analysis, references, and POCs.

Vendor: dasinfomedia

CVE IDTitleCVSSSeverityPaused
CVE-2025-6079 School Management System <= 93.2.0 - Authenticated (Student+) Arbitrary File Upload CWE-434 8.8 High2025-08-16
CVE-2024-12612 School Management System for Wordpress <= 93.2.0 - Unauthenticated SQL Injection CWE-89 7.5 High2025-08-16
CVE-2025-3740 School Management System for Wordpress <= 93.1.0 - Authenticated (Subscriber+) Local File Inclusion to Privilege Escalation via Password Update CWE-22 8.8 High2025-07-18
CVE-2024-12609 School Management System for Wordpress <= 92.0.0 - Authenticated (Student+) SQL Injection via 'view-attendance' CWE-89 6.5 Medium2025-03-07
CVE-2024-9658 School Management System for Wordpress <= 93.0.0 - Authenticated (Student+) Account Takeover and Privilege Escalation CWE-288 8.8 High2025-03-07
CVE-2024-12610 School Management System for Wordpress <= 93.0.0 - Missing Authorization to Unauthenticated Arbitrary Post Deletion CWE-862 5.3 Medium2025-03-07
CVE-2024-12611 School Management System for Wordpress <= 93.0.0 - Reflected Cross-Site Scripting CWE-862 5.3 Medium2025-03-07
CVE-2024-12607 School Management System for Wordpress <= 92.0.0 - Authenticated (Subscriber+) SQL Injection via 'mj_smgt_show_event_task' CWE-89 6.5 Medium2025-03-07
CVE-2024-9659 School Management <= 91.5.0 - Unauthenticated Arbitrary File Upload CWE-434 9.8 Critical2024-11-23
CVE-2024-9660 School Management <= 91.5.0 - Authenticated (Student+) Arbitrary File Upload CWE-434 8.8 High2024-11-23

All 10 known CVE vulnerabilities affecting School Management System for Wordpress with full Chinese analysis, references, and POCs where available.