Log in Start free

Mojoomla

Products

ProductCVEsExploitedLatest
School Management10–Jun 17, 2026
WPAMS8–Jun 16, 2026
Hospital Management System6–May 23, 2025
WPGYM3–Jul 16, 2025
WPCHURCH2–Jan 7, 2026
WPCRM - CRM for Contact form CF7 & WooCommerce2–Jun 27, 2025

Exploited and recent CVEs

  • CVE-2025-15657 Medium 5.3 WordPress School Management plugin <= 93.1.0 - Insecure Direct Object References (IDOR) vulnerability 0.2%
  • CVE-2026-39433 Medium 6.5 WordPress WPAMS plugin < 49.5.3 - Arbitrary Content Deletion vulnerability 0.4%
  • CVE-2025-15656 High 8.8 WordPress School Management plugin <= 93.2.0 - Privilege Escalation vulnerability 0.2%
  • CVE-2025-15655 High 7.6 WordPress School Management plugin <= 93.2.0 - SQL Injection vulnerability 0.2%
  • CVE-2025-32303 Critical 9.3 WordPress WPCHURCH plugin <= 2.7.0 - SQL Injection Vulnerability 0.3%
  • CVE-2025-32304 High 8.1 WordPress WPCHURCH plugin <= 2.7.0 - Local File Inclusion vulnerability 0.5%
  • CVE-2025-31100 Critical 9.9 WordPress School Management Plugin <= 1.93.1 (02-07-2025) - Arbitrary File Upload Vulnerability 0.4%
  • CVE-2025-48108 Medium 6.5 WordPress School Management Plugin <= 93.2.0 - Broken Access Control Vulnerability 0.2%
  • CVE-2025-32574 High 8.5 WordPress WPGYM plugin <= 65.0 - SQL Injection vulnerability 0.4%
  • CVE-2025-24774 High 7.1 WordPress WPCRM - CRM for Contact form CF7 & WooCommerce plugin <= 3.2.0 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-47574 High 7.1 WordPress School Management System Plugin <= 92.0.0 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-24773 Critical 9.3 WordPress WPCRM - CRM for Contact form CF7 & WooCommerce plugin <= 3.2.0 - SQL Injection Vulnerability 0.4%
  • CVE-2025-32549 High 7.5 WordPress WPGYM <= 65.0 - Local File Inclusion Vulnerability 0.7%
  • CVE-2025-47572 High 7.5 WordPress School Management <= 93.0.0 - Local File Inclusion Vulnerability 0.7%
  • CVE-2025-47573 Critical 9.3 WordPress School Management System Plugin <= 92.0.0 - SQL Injection vulnerability 0.5%
  • CVE-2025-47575 High 8.5 WordPress School Management plugin <= 92.0.0 - SQL Injection vulnerability 0.3%
  • CVE-2025-47613 High 7.1 WordPress School Management System for Wordpress plugin <= 92.0.0 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-47631 High 8.8 WordPress Hospital Management System plugin <= 47.0(20-11-2023) - Privilege Escalation vulnerability 0.4%
  • CVE-2025-47663 Critical 9.9 WordPress Hospital Management System plugin <= 47.0(20-11-2023) - Arbitrary File Upload vulnerability 0.4%
  • CVE-2025-39357 High 8.5 WordPress Hospital Management System plugin <= 47.0(20-11-2023) - SQL Injection vulnerability 0.3%
  • CVE-2025-39380 Critical 10.0 WordPress Hospital Management System plugin <= 47.0(20-11-2023) - Arbitrary File Upload vulnerability 0.4%
  • CVE-2025-39386 Critical 9.3 WordPress Hospital Management System plugin <= 47.0(20-11-2023) - SQL Injection vulnerability 0.4%
  • CVE-2025-39392 High 7.1 WordPress WPAMS plugin <= 44.0 (17-08-2023) - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-39393 High 7.1 WordPress Hospital Management System plugin <= 47.0(20-11-2023) - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-39395 Critical 9.3 WordPress WPAMS plugin <= 44.0 (17-08-2023) - SQL Injection vulnerability 0.4%
  • CVE-2025-39401 Critical 10.0 WordPress WPAMS plugin <= 44.0 (17-08-2023) - Arbitrary File Upload vulnerability 0.6%
  • CVE-2025-39402 Critical 9.9 WordPress WPAMS plugin <= 44.0 (17-08-2023) - Arbitrary File Upload vulnerability 0.4%
  • CVE-2025-39403 High 8.5 WordPress WPAMS plugin <= 44.0 (17-08-2023) - SQL Injection vulnerability 0.3%
  • CVE-2025-39405 High 8.8 WordPress WPAMS plugin <= 44.0 (17-08-2023) - Privilege Escalation vulnerability 0.4%
  • CVE-2025-39406 Critical 9.8 WordPress WPAMS plugin <= 44.0 - Local File Inclusion to Privilege Escalation vulnerability 0.5%