Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 28
Reset filtersSchool Management <= 93.1.0 - Unauthenticated Insecure Direct Object Reference
School Management System for Wordpress <= 93.2.0 - Unauthenticated SQL Injection
School Management System <= 93.2.0 - Authenticated (Student+) Arbitrary File Upload
School Management <= 93.1.0 - Unauthenticated Insecure Direct Object Reference
Dropshix <= 4.0.14 - Authenticated (Administrator+) Stored Cross-Site Scripting
School Management <= 93.2.0 - Authenticated (Support staff+) SQL Injection
School Management <= 93.2.0 - Missing Authorization
School Management <= 1.93.1 (02-07-2025) - Authenticated (Student+) Arbitrary File Upload
School Management System for Wordpress <= 93.1.0 - Authenticated (Subscriber+) Local File Inclusion to Privilege Escalation via Password Update
School Management <= 92.0.0 - Reflected Cross-Site Scripting
School Management <= 93.2.0 - Authenticated (Support Staff+) Privilege Escalation
School Management <= 93.0.0 - Authenticated (Student+) Local File Inclusion
School Management <= 92.0.0 - Unauthenticated SQL Injection
School Management <= 92.0.0 - Authenticated (Subscriber+) SQL Injection
School Management <= 92.0.0 - Reflected Cross-Site Scripting
School Management System for Wordpress <= 93.0.0 - Authenticated (Student+) Account Takeover and Privilege Escalation
School Management System for Wordpress <= 92.0.0 - Authenticated (Student+) SQL Injection via 'view-attendance'
School Management System for Wordpress <= 93.0.0 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
School Management System for Wordpress <= 93.0.0 - Reflected Cross-Site Scripting
School Management System for Wordpress <= 92.0.0 - Authenticated (Subscriber+) SQL Injection via 'mj_smgt_show_event_task'
School Management <= 91.5.0 - Unauthenticated Arbitrary File Upload
School Management <= 91.5.0 - Authenticated (Student+) Arbitrary File Upload
School Management Pro <= 10.3.4 - Authenticated (School Admin+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.