Media
CVE-2026-9767
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 28
Restablecer filtros
Media
CVE-2025-15657
School Management <= 93.1.0 - Unauthenticated Insecure Direct Object Reference
Alta
CVE-2024-12612
School Management System for Wordpress <= 93.2.0 - Unauthenticated SQL Injection
Alta
CVE-2025-6079
School Management System <= 93.2.0 - Authenticated (Student+) Arbitrary File Upload
Media
CVE-2025-49896
School Management <= 93.1.0 - Unauthenticated Insecure Direct Object Reference
Media
CVE-2025-49898
Dropshix <= 4.0.14 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2025-15655
School Management <= 93.2.0 - Authenticated (Support staff+) SQL Injection
Media
CVE-2025-48108
School Management <= 93.2.0 - Missing Authorization
Crítica
CVE-2025-31100
School Management <= 1.93.1 (02-07-2025) - Authenticated (Student+) Arbitrary File Upload
Alta
CVE-2025-3740
School Management System for Wordpress <= 93.1.0 - Authenticated (Subscriber+) Local File Inclusion to Privilege Escalation via Password Update
Media
CVE-2025-47574
School Management <= 92.0.0 - Reflected Cross-Site Scripting
Media
CVE-2025-15656
School Management <= 93.2.0 - Authenticated (Support Staff+) Privilege Escalation
Alta
CVE-2025-47572
School Management <= 93.0.0 - Authenticated (Student+) Local File Inclusion
Alta
CVE-2025-47573
School Management <= 92.0.0 - Unauthenticated SQL Injection
Media
CVE-2025-47575
School Management <= 92.0.0 - Authenticated (Subscriber+) SQL Injection
Media
CVE-2025-47613
School Management <= 92.0.0 - Reflected Cross-Site Scripting
Alta
CVE-2024-9658
School Management System for Wordpress <= 93.0.0 - Authenticated (Student+) Account Takeover and Privilege Escalation
Media
CVE-2024-12609
School Management System for Wordpress <= 92.0.0 - Authenticated (Student+) SQL Injection via 'view-attendance'
Media
CVE-2024-12610
School Management System for Wordpress <= 93.0.0 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
Media
CVE-2024-12611
School Management System for Wordpress <= 93.0.0 - Reflected Cross-Site Scripting
Media
CVE-2024-12607
School Management System for Wordpress <= 92.0.0 - Authenticated (Subscriber+) SQL Injection via 'mj_smgt_show_event_task'
Crítica
CVE-2024-9659
School Management <= 91.5.0 - Unauthenticated Arbitrary File Upload
Alta
CVE-2024-9660
School Management <= 91.5.0 - Authenticated (Student+) Arbitrary File Upload
Crítica
CVE-2024-33911
School Management Pro <= 10.3.4 - Authenticated (School Admin+) SQL Injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.