School Management System – WPSchoolPress

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   School Management System – WPSchoolPress

Information

Software Type Plugin
Software Slug wpschoolpress (view on wordpress.org)
Software Status Active
Software Author jdsofttech
Software Website wpschoolpress.com
Software Downloads 208,590
Software Active Installs 1,000
Software Record Last Updated July 20, 2026

14 Vulnerabilities

Submit a Vulnerability
WPSchoolPress <= 2.2.36 - Missing Authorization
4.3
CVE-2026-39631
Feb 13, 2026
Researcher: Nabil Irawan
School Management System – WPSchoolPress <= 2.2.23 - Authenticated (Administrator+) SQL Injection
4.9
CVE-2025-11981
Nov 13, 2025
Researcher: dutafi
School Management System – WPSchoolPress <= 2.2.16 - Missing Authorization to Arbitrary User Deletion
4.3
CVE-2025-1668
Mar 14, 2025
Researcher: wesley (wcraft)
School Management System – WPSchoolPress <= 2.2.16 - Authenticated (Parent+) SQL Injection
6.5
CVE-2025-1670
Mar 14, 2025
Researcher: wesley (wcraft)
School Management System – WPSchoolPress <= 2.2.16 - Missing Authorization to Privilege Escalation via Account Takeover
8.8
CVE-2025-1667
Mar 14, 2025
Researcher: wesley (wcraft)
School Management System – WPSchoolPress <= 2.2.17 - Authenticated (Teacher+) SQL Injection
6.5
CVE-2025-1669
Mar 14, 2025
Researcher: wesley (wcraft)
School Management System – WPSchoolPress <= 2.2.14 - Authenticated (Student/Parent+) SQL Injection
6.5
CVE-2024-12332
Jan 6, 2025
Researcher: shaman0x01
School Management System – WPSchoolPress <= 2.2.10 - Insecure Direct Object Reference to Authenticated (Teacher+) Account Takeover/Privilege Escalation
8.8
CVE-2024-9637
Oct 25, 2024
Researcher: wesley (wcraft)
WPSchoolPress <= 2.2.4 - Authenticated(Teacher+) SQL Injection via ClassID
7.2
CVE-2023-4776
Sep 25, 2023
Researcher: Dao Xuan Hieu
WPSchoolPress <= 2.2.4 - Cross-Site Request Forgery
6.3
CVE ID Unknown
Sep 18, 2023
Researchers:
WPSchoolPress <= 2.2.3 - Missing Authorization
5.4
CVE-2023-37887
Jul 11, 2023
Researcher: Fariq Fadillah Gusti Insani (fariqfgi)
School Management System – WPSchoolPress < 2.1.10 - Reflected Cross-Site Scripting
7.1
CVE ID Unknown
Oct 11, 2021
Researcher: WPScanTeam
School Management System – WPSchoolPress <= 2.1.9 - SQL Injection
8.8
CVE-2021-24575
Oct 11, 2021
Researcher: ZhongFu Su
School Management System – WPSchoolPress <= 2.1.16 - Stored Cross-Site Scripting
4.8
CVE-2021-24664
Oct 11, 2021
Researcher: Davide Taraschi
Title Status CVE ID CVSS Researchers Date
WPSchoolPress <= 2.2.36 - Missing Authorization Unpatched CVE-2026-39631 4.3 Nabil Irawan February 13, 2026
School Management System – WPSchoolPress <= 2.2.23 - Authenticated (Administrator+) SQL Injection Patched CVE-2025-11981 4.9 dutafi November 13, 2025
School Management System – WPSchoolPress <= 2.2.16 - Missing Authorization to Arbitrary User Deletion Patched CVE-2025-1668 4.3 wesley (wcraft) March 14, 2025
School Management System – WPSchoolPress <= 2.2.16 - Authenticated (Parent+) SQL Injection Patched CVE-2025-1670 6.5 wesley (wcraft) March 14, 2025
School Management System – WPSchoolPress <= 2.2.16 - Missing Authorization to Privilege Escalation via Account Takeover Patched CVE-2025-1667 8.8 wesley (wcraft) March 14, 2025
School Management System – WPSchoolPress <= 2.2.17 - Authenticated (Teacher+) SQL Injection Patched CVE-2025-1669 6.5 wesley (wcraft) March 14, 2025
School Management System – WPSchoolPress <= 2.2.14 - Authenticated (Student/Parent+) SQL Injection Patched CVE-2024-12332 6.5 shaman0x01 January 6, 2025
School Management System – WPSchoolPress <= 2.2.10 - Insecure Direct Object Reference to Authenticated (Teacher+) Account Takeover/Privilege Escalation Patched CVE-2024-9637 8.8 wesley (wcraft) October 25, 2024
WPSchoolPress <= 2.2.4 - Authenticated(Teacher+) SQL Injection via ClassID Patched CVE-2023-4776 7.2 Dao Xuan Hieu September 25, 2023
WPSchoolPress <= 2.2.4 - Cross-Site Request Forgery Patched 6.3 September 18, 2023
WPSchoolPress <= 2.2.3 - Missing Authorization Patched CVE-2023-37887 5.4 Fariq Fadillah Gusti Insani (fariqfgi) July 11, 2023
School Management System – WPSchoolPress < 2.1.10 - Reflected Cross-Site Scripting Patched 7.1 WPScanTeam October 11, 2021
School Management System – WPSchoolPress <= 2.1.9 - SQL Injection Patched CVE-2021-24575 8.8 ZhongFu Su October 11, 2021
School Management System – WPSchoolPress <= 2.1.16 - Stored Cross-Site Scripting Patched CVE-2021-24664 4.8 Davide Taraschi October 11, 2021

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation