CVE-2025-1670 School Management System – WPSchoolPress <= 2.2.16 - Authenticated (Parent+) SQL Injection

The School Management System – WPSchoolPress plugin for WordPress is vulnerable to SQL Injection via the 'cid' parameter in all versions up to, and including, 2.2.16 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This make...

CVE-2025-1670 School Management System – WPSchoolPress <= 2.2.16 - Authenticated (Parent+) SQL Injection

The School Management System – WPSchoolPress plugin for WordPress is vulnerable to SQL Injection via the 'cid' parameter in all versions up to, and including, 2.2.16 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This make...

CVE-2025-1667 School Management System – WPSchoolPress <= 2.2.16 - Missing Authorization to Privilege Escalation via Account Takeover

The School Management System – WPSchoolPress plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the wpspUpdateTeacher function in all versions up to, and including, 2.2.16. This makes it possible for authenticated attackers, with teacher-level access a...

CVE-2025-1668 School Management System – WPSchoolPress <= 2.2.16 - Missing Authorization to Arbitrary User Deletion

The School Management System – WPSchoolPress plugin for WordPress is vulnerable to arbitrary user deletion due to a missing capability check on the wpspDeleteUser function in all versions up to, and including, 2.2.16. This makes it possible for authenticated attackers, with teacher-level access a...

CVE-2025-1667

CVE-2025-1667 refers to the WordPress plugin School Management System – WPSchoolPress (versions

CVE-2025-1668

CVE-2025-1668 concerns the WordPress plugin WPSchoolPress (School Management System) for versions

CVE-2025-1670

CVE-2025-1670 describes an authenticated SQL injection in the School Management System – WPSchoolPress WordPress plugin (

CVE-2025-1667 School Management System – WPSchoolPress <= 2.2.16 - Missing Authorization to Privilege Escalation via Account Takeover

The School Management System – WPSchoolPress plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the wpspUpdateTeacher function in all versions up to, and including, 2.2.16. This makes it possible for authenticated attackers, with teacher-level access a...

CVE-2025-1669 School Management System – WPSchoolPress <= 2.2.17 - Authenticated (Teacher+) SQL Injection

The School Management System – WPSchoolPress plugin for WordPress is vulnerable to SQL Injection via the 'addNotify' action in all versions up to, and including, 2.2.17 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...

CVE-2025-1669 School Management System – WPSchoolPress <= 2.2.17 - Authenticated (Teacher+) SQL Injection

The School Management System – WPSchoolPress plugin for WordPress is vulnerable to SQL Injection via the 'addNotify' action in all versions up to, and including, 2.2.17 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...

CVE-2025-1669

CVE-2025-1669 affects the WordPress plugin “School Management System – WPSchoolPress” (versions

WordPress plugin WPSchoolPress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WordPress plugin WPSchoolPress SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin...

WordPress plugin WPSchoolPress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WordPress plugin WPSchoolPress SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin...

WordPress WPSchoolPress plugin <= 2.2.16 - Missing Authorization to Arbitrary User Deletion vulnerability

Missing Authorization to Arbitrary User Deletion vulnerability discovered by wesley wcraft in WordPress Plugin WPSchoolPress versions = 2.2.16...

WordPress School Management System – WPSchoolPress plugin <= 2.2.16 - Authenticated (Parent+) SQL Injection vulnerability

Authenticated Parent+ SQL Injection vulnerability discovered by wesley wcraft in WordPress Plugin WPSchoolPress versions = 2.2.16...

WordPress WPSchoolPress plugin <= 2.2.17 - SQL Injection vulnerability

SQL Injection vulnerability discovered by wesley wcraft in WordPress Plugin WPSchoolPress versions = 2.2.17...

WordPress WPSchoolPress plugin <= 2.2.16 - Missing Authorization to Privilege Escalation via Account Takeover vulnerability

Missing Authorization to Privilege Escalation via Account Takeover vulnerability discovered by wesley wcraft in WordPress Plugin WPSchoolPress versions = 2.2.16...

WordPress School Management System – WPSchoolPress plugin <= 2.2.14 - Authenticated (Student/Parent+) SQL Injection vulnerability

Authenticated Student/Parent+ SQL Injection vulnerability discovered by shaman0x01 in WordPress Plugin WPSchoolPress versions = 2.2.14...