jdsofttech

Products

ProductCVEsExploitedLatest
School Management System – WPSchoolPress7–Nov 14, 2025

Exploited and recent CVEs

  • CVE-2025-11981 Medium 4.9 School Management System – WPSchoolPress <= 2.2.23 - Authenticated (Administrator+) SQL Injection 0.3%
  • CVE-2025-1668 Medium 4.3 School Management System – WPSchoolPress <= 2.2.16 - Missing Authorization to Arbitrary User Deletion 0.3%
  • CVE-2025-1670 Medium 6.5 School Management System – WPSchoolPress <= 2.2.16 - Authenticated (Parent+) SQL Injection 0.4%
  • CVE-2025-1667 High 8.8 School Management System – WPSchoolPress <= 2.2.16 - Missing Authorization to Privilege Escalation via Account Takeover 0.4%
  • CVE-2025-1669 Medium 6.5 School Management System – WPSchoolPress <= 2.2.17 - Authenticated (Teacher+) SQL Injection 0.4%
  • CVE-2024-12332 Medium 6.5 School Management System – WPSchoolPress <= 2.2.14 - Authenticated (Student/Parent+) SQL Injection 0.4%
  • CVE-2024-9637 High 8.8 School Management System – WPSchoolPress <= 2.2.10 - Insecure Direct Object Reference to Authenticated (Teacher+) Account Takeover/Privilege Escalation 0.5%