Dasinfomedia School Management System For WordPress
10 CVEs affecting Dasinfomedia School Management System For WordPress. Latest disclosed: 2025-08-16. Critical: 1, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-9659 | Critical | 9.8 | 2024-11-23 | The School Management System for Wordpress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the mj_smgt_user… |
CVE-2025-6079 | High | 8.8 | 2025-08-16 | The School Management System for Wordpress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the homework.php… |
CVE-2025-3740 | High | 8.8 | 2025-07-18 | The School Management System for Wordpress plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 93.1.0 via the 'pag… |
CVE-2024-9658 | High | 8.8 | 2025-03-07 | The School Management System for Wordpress plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including… |
CVE-2024-9660 | High | 8.8 | 2024-11-23 | The School Management System for Wordpress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the mj_smgt_load… |
CVE-2024-12612 | High | 7.5 | 2025-08-16 | The School Management System for Wordpress plugin for WordPress is vulnerable to SQL Injection via several parameters across multiple AJAX action in all versio… |
CVE-2024-12609 | Medium | 6.5 | 2025-03-07 | The School Management System for Wordpress plugin for WordPress is vulnerable to SQL Injection via the 'view-attendance' page in all versions up to, and includ… |
CVE-2024-12607 | Medium | 6.5 | 2025-03-07 | The School Management System for Wordpress plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter of the 'mj_smgt_show_event_task' AJAX act… |
CVE-2024-12611 | Medium | 5.3 | 2025-03-07 | The School Management System for Wordpress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'title' parameter in all versions up to… |
CVE-2024-12610 | Medium | 5.3 | 2025-03-07 | The School Management System for Wordpress plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'mj_smgt_re… |