JD
Vendor
jdsofttech
8
CVEs
0
On KEV
0
New 30D
Products
SM8.8
School Management System – WPSchoolPress
jdsofttech
7 CVEs0 on KEV0 new
SM8.8
School Management System
Jdsofttech
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-11981 | SM School Management System – WPSchoolPress jdsofttech | 4.9 | Nov 14 | School Management System – WPSchoolPress <= 2.2.23 - Authenticated (Administrator+) SQL Injection |
| CVE-2025-1668 | SM School Management System – WPSchoolPress jdsofttech | 5.4 | Mar 15 | School Management System – WPSchoolPress <= 2.2.16 - Missing Authorization to Arbitrary User Deletion |
| CVE-2025-1670 | SM School Management System – WPSchoolPress jdsofttech | 6.5 | Mar 15 | School Management System – WPSchoolPress <= 2.2.16 - Authenticated (Parent+) SQL Injection |
| CVE-2025-1667 | SM School Management System – WPSchoolPress jdsofttech | 4.3 | Mar 15 | School Management System – WPSchoolPress <= 2.2.16 - Missing Authorization to Privilege Escalation via Account Takeover |
| CVE-2025-1669 | SM School Management System – WPSchoolPress jdsofttech | 6.5 | Mar 15 | School Management System – WPSchoolPress <= 2.2.17 - Authenticated (Teacher+) SQL Injection |
| CVE-2024-12332 | SM School Management System – WPSchoolPress jdsofttech | 6.5 | Jan 7 | School Management System – WPSchoolPress <= 2.2.14 - Authenticated (Student/Parent+) SQL Injection |
| CVE-2024-9637 | SM School Management System – WPSchoolPress jdsofttech | 8.8 | Oct 26 | School Management System – WPSchoolPress <= 2.2.10 - Insecure Direct Object Reference to Authenticated (Teacher+) Account Takeover/Privilege Escalation |