Authentication vulnerability in School Management System for WordPress 93.0.0

The School Management System for WordPress plugin is not secure. It could allow someone to gain more control over the system by taking over someone else’s account. This is because the plugin doesn’t check to make sure the user is who they say they are before letting them change their email or password. This could also lead to a hacker being able to access an administrator’s account. We reported this issue four months ago but it still hasn’t been fixed.

Detected in:

School Management System for Wordpress open vulnerable versions: >= * <= 93.0.0

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.