Lucene search
Jetpack Scan Team and WordPress elevated support teamPATCHSTACK:C50B149DEB9C569BF1F7462025319F82HistoryMay 20, 2022 - 12:00 a.m.
WordPress School Management Pro premium plugin < 9.9.7 - Unauthenticated Remote Code Execution (RCE) via REST API
2022-05-2000:00:00
Jetpack Scan Team and WordPress elevated support team
patchstack.com
69
0.166 Low
EPSS
Percentile
96.1%
Unauthenticated Remote Code Execution (RCE) via REST API discovered by Jetpack Scan Team and WordPress elevated support team in WordPress School Management Pro premium plugin (versions < 9.9.7).
Solution
Update the WordPress School Management Pro premium plugin to the latest available version (at least 9.9.7).
| CPE | Name | Operator | Version |
|---|---|---|---|
| school management pro | lt | 9.9.7 |
Related
githubexploit
githubexploit
Exploit for CVE-2022-1609
2022-06-03 02:49:49
Exploit for Code Injection in Weblizar School Management
2022-06-09 14:36:55
Exploit for CVE-2022-1609
2022-06-08 11:28:08
cvelist
cvelist
cve
cve
CVE-2022-1609
2024-01-16 16:15:09
wpvulndb
wpvulndb
The School Management < 9.9.7 - Unauthenticated RCE via REST api
2022-05-18 00:00:00
attackerkb
attackerkb
CVE-2022-1609
2024-01-16 00:00:00
prion
prion
Code injection
2024-01-16 16:15:00
nvd
nvd
CVE-2022-1609
2024-01-16 16:15:09
thn
thn
Researchers Find Backdoor in School Management Plugin for WordPress
2022-05-21 05:11:00
saint
saint
Weblizar School Management Pro plugin backdoor
2022-08-12 00:00:00
Weblizar School Management Pro plugin backdoor
2022-08-12 00:00:00
nuclei
nuclei
The School Management < 9.9.7 - Remote Code Execution
2022-05-26 06:25:43
wpexploit
wpexploit
The School Management < 9.9.7 - Unauthenticated RCE via REST api
2022-05-18 00:00:00