mojoomla vulnerabilities

CVEs per yearBy the year they were published

1. 202525
2. 20266

Newest CVEs

• CVE-2025-15657

  WordPress School Management plugin <= 93.1.0 - Insecure Direct Object References (IDOR) vulnerability

  Mojoomla · School Management

  Medium5.3
• CVE-2026-39433

  WordPress WPAMS plugin < 49.5.3 - Arbitrary Content Deletion vulnerability

  mojoomla · WPAMS

  Medium6.5
• CVE-2025-15656

  WordPress School Management plugin <= 93.2.0 - Privilege Escalation vulnerability

  Mojoomla · School Management

  High8.8
• CVE-2025-15655

  WordPress School Management plugin <= 93.2.0 - SQL Injection vulnerability

  Mojoomla · School Management

  High7.6
• CVE-2025-32303

  WordPress WPCHURCH plugin <= 2.7.0 - SQL Injection Vulnerability

  Mojoomla · WPCHURCH

  Critical9.3
• CVE-2025-32304

  WordPress WPCHURCH plugin <= 2.7.0 - Local File Inclusion vulnerability

  Mojoomla · WPCHURCH

  High8.1
• CVE-2025-31100

  WordPress School Management Plugin <= 1.93.1 (02-07-2025) - Arbitrary File Upload Vulnerability

  Mojoomla · School Management

  Critical9.9
• CVE-2025-48108

  WordPress School Management Plugin <= 93.2.0 - Broken Access Control Vulnerability

  Mojoomla · School Management

  Medium6.5
• CVE-2025-32574

  WordPress WPGYM plugin <= 65.0 - SQL Injection vulnerability

  mojoomla · WPGYM

  High8.5
• CVE-2025-24774

  WordPress WPCRM - CRM for Contact form CF7 & WooCommerce plugin <= 3.2.0 - Reflected Cross Site Scripting (XSS) vulnerability

  mojoomla · WPCRM - CRM for Contact form CF7 & WooCommerce

  High7.1