Approved changes feed: RSS · Atom

cpe:2.3:a:weblizar:school_management:*:*:*:*:pro:wordpress:*:*

part: a version: * update: *

VendorWeblizar (728a5648-dc27-5b44-841d-3675ae66fe14)
ProductSchool Management (7fb3fac6-b552-5b48-b5e6-dabc5d16a186)
Edition*
Language*
Software editionpro
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-33911 vulnerable 2026-06-08 06:37:32.301833 WordPress The School Management Pro plugin <= 10.3.4 - SQL Injection vulnerability
HIGH (7.6)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Weblizar School Management Pro.This issue affects School Management Pro: from n/a through 10.3.4.
Published: 2024-05-02T11:10:19.104Z
Updated: 2026-04-28T16:09:46.247Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1609 vulnerable 2026-06-08 05:39:13.561656 The School Management < 9.9.7 - Unauthenticated RCE via REST api
The School Management WordPress plugin before 9.9.7 contains an obfuscated backdoor injected in it's license checking code that registers a REST API handler, allowing an unauthenticated attacker to execute arbitrary PHP code on the site.
Published: 2024-01-16T15:52:21.658Z
Updated: 2025-06-02T15:10:34.673Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.