CVE Intelligence

Mojoomla School Management vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Mojoomla School Management: 3 record(s), with affected versions and fixes.

CVE-2025-15657 Medium · 5.3 CWE-639 Jun 17, 2026
WordPress School Management plugin <= 93.1.0 - Insecure Direct Object References (IDOR) vulnerability
Unauthenticated Insecure Direct Object References (IDOR) in School Management <= 93.1.0 versions.
CVE-2025-15656 High · 8.8 CWE-266 Jun 3, 2026
WordPress School Management plugin <= 93.2.0 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in Mojoomla School Management allows Privilege Escalation. This issue affects School Management: from n/a through 93.2.0.
CVE-2025-15655 High · 7.6 CWE-89 Jun 3, 2026
WordPress School Management plugin <= 93.2.0 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mojoomla School Management allows SQL Injection. This issue affects School Management: from n/a through 93.2.0.