Igexsolutions Wpschoolpress — known CVE vulnerabilities

Every CVE whose affected-product data names Igexsolutions Wpschoolpress, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (9)

• CVE-2021-24575 — CVSS 8.8 (high): The School Management System – WPSchoolPress WordPress plugin before 2.1.10 does not properly sanitize or use prepared statements before…
• CVE-2023-4776 — CVSS 8.8 (high): The School Management System WordPress plugin before 2.2.5 uses the WordPress esc_sql() function on a field not delimited by quotes and did…
• CVE-2024-9637 — CVSS 8.8 (high): The School Management System – WPSchoolPress plugin for WordPress is vulnerable to privilege escalation via account takeover in all…
• CVE-2025-1667 — CVSS 8.8 (high): The School Management System – WPSchoolPress plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check…
• CVE-2025-1669 — CVSS 6.5 (medium): The School Management System – WPSchoolPress plugin for WordPress is vulnerable to SQL Injection via the 'addNotify' action in all…
• CVE-2025-1670 — CVSS 6.5 (medium): The School Management System – WPSchoolPress plugin for WordPress is vulnerable to SQL Injection via the 'cid' parameter in all versions…
• CVE-2024-12332 — CVSS 6.5 (medium): The School Management System – WPSchoolPress plugin for WordPress is vulnerable to SQL Injection via the 'cid' parameter in all versions…
• CVE-2021-24664 — CVSS 4.8 (medium): The School Management System – WPSchoolPress WordPress plugin before 2.1.17 sanitise some fields using sanitize_text_field() but does not…
• CVE-2025-1668 — CVSS 4.3 (medium): The School Management System – WPSchoolPress plugin for WordPress is vulnerable to arbitrary user deletion due to a missing capability…