EUVD-2022-34582

Malicious code in bioql PyPI...

CVE-2022-2381

The E Unlocked - Student Result WordPress plugin through 1.0.4 is lacking CSRF and validation when uploading the School logo, which could allow attackers to make a logged in admin upload arbitrary files, such as PHP via a CSRF attack...

Authentication flaw

The Simple Student Result plugin before 1.6.4 for WordPress has an Authentication Bypass vulnerability because the fnssraddstsubmit function and fnssrdelstsubmit function in functions.php only require knowing the student id number...

CVE-2017-14766

The CVE-2017-14766 issue affects the WordPress Simple Student Result plugin before 1.6.4. It is an Authentication Bypass caused by fn_ssr_add_st_submit() and fn_ssr_del_st_submit() in functions.php that only require a student id number to perform actions, enabling updates or deletions of student ...