School Management vulnerabilities

2 known vulnerabilities in School Management from Weblizar. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  School Management Pro: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-33911May 2, 2024WeblizarEPSS 1.09%

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Weblizar School Management Pro.This issue affects School Management Pro: from n/a through 10.3.4.

• 9.8 Critical severity

  school-management-pro: Improper Control of Generation of Code

  CVE-2022-1609Jan 16, 2024School-management-proEPSS 64.1%

  The School Management WordPress plugin before 9.9.7 contains an obfuscated backdoor injected in it's license checking code that registers a REST API handler, allowing an unauthenticated attacker to execute arbitrary PHP code on the site.