CVE-2024-12612High 7.5School Management System for Wordpress <= 93.2.0 - Unauthenticated SQL Injection0.5%
CVE-2025-3740High 8.8School Management System for Wordpress <= 93.1.0 - Authenticated (Subscriber+) Local File Inclusion to Privilege Escalation via Password Update0.8%
CVE-2024-9658High 8.8School Management System for Wordpress <= 93.0.0 - Authenticated (Student+) Account Takeover and Privilege Escalation0.4%
CVE-2024-12609Medium 6.5School Management System for Wordpress <= 92.0.0 - Authenticated (Student+) SQL Injection via 'view-attendance'0.4%
CVE-2024-12610Medium 5.3School Management System for Wordpress <= 93.0.0 - Missing Authorization to Unauthenticated Arbitrary Post Deletion0.3%
CVE-2024-12611Medium 5.3School Management System for Wordpress <= 93.0.0 - Reflected Cross-Site Scripting0.3%
CVE-2024-12607Medium 6.5School Management System for Wordpress <= 92.0.0 - Authenticated (Subscriber+) SQL Injection via 'mj_smgt_show_event_task'0.3%