📦 Wpschoolpress

This vulnerability allows authenticated attackers with teacher-level access or higher in the WPSchoolPress WordPress plugin to escalate privileges by updating arbitrary user details, including email a...

This SQL injection vulnerability in the School Management System WordPress plugin allows attackers to execute arbitrary SQL commands on the database. Relatively low-privilege users like Teachers can e...

The WPSchoolPress WordPress plugin has a missing capability check that allows authenticated users with teacher-level access or higher to delete any user account. This vulnerability affects all WordPre...

This SQL injection vulnerability in the WPSchoolPress WordPress plugin allows authenticated attackers with Custom-level access or higher to execute arbitrary SQL queries. Attackers can extract sensiti...

The WPSchoolPress WordPress plugin contains a SQL injection vulnerability in the 'cid' parameter that allows authenticated attackers with Student/Parent-level access or higher to execute arbitrary SQL...