School Management System – WPSchoolPress

Vulnerabilities 18Slug wpschoolpressLatest version 2.2.40WordPress.org →

Minimum safe version

2.2.24

Update to 2.2.24 or later to address 17 fixable vulnerabilities

Latest available2.2.40 ✓⚠ 1 vulnerability has no fix
Medium 4.9 Unfixed
2026-04-08≤ 2.2.38

CVE-2026-39631

CVEWordfence
Medium 4.3
2025-03-15< 2.2.17

School Management System – WPSchoolPress <= 2.2.16 - Missing Authorization to Arbitrary User Deletion

EUVDWordfenceCVE
Medium 6.5
2025-03-15< 2.2.17

School Management System – WPSchoolPress <= 2.2.16 - Authenticated (Parent+) SQL Injection

EUVDWordfenceCVE
High 8.8
2025-03-15< 2.2.17

School Management System – WPSchoolPress <= 2.2.16 - Missing Authorization to Privilege Escalation via Account Takeover

EUVDWordfenceCVE
Medium 6.5
2025-03-15< 2.2.18

School Management System – WPSchoolPress <= 2.2.17 - Authenticated (Teacher+) SQL Injection

EUVDWordfenceCVE
N/A
< 2.2.5

WPSchoolPress &lt; 2.2.5 - Cross-Site Request Forgery

WPScan
N/A
2023-09-19< 2.2.5

WordPress WPSchoolPress Plugin < 2.2.5 is vulnerable to Cross Site Request Forgery (CSRF)

Patchstack
N/A
2023-09-18< 2.2.5

WPSchoolPress <= 2.2.4 - Cross-Site Request Forgery

Wordfence
N/A
< 2.1.10

WPSchoolPress &lt; 2.1.10 - Reflected Cross-Site Scripting

WPScan
N/A
2021-10-11< 2.1.10

School Management System – WPSchoolPress < 2.1.10 - Reflected Cross-Site Scripting

Wordfence
N/A
2021-10-11< 2.1.10

WordPress WPSchoolPress plugin <= 2.1.9 - Reflected Cross-Site Scripting (XSS) vulnerability

Patchstack