Mojoomla vulnerabilities
31 CVEs and advisories name Mojoomla as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-15657WordPress School Management plugin <= 93.1.0 - Insecure Direct Object References (IDOR) vulnerability
- CVE-2026-39433WordPress WPAMS plugin < 49.5.3 - Arbitrary Content Deletion vulnerability
- CVE-2025-15656WordPress School Management plugin <= 93.2.0 - Privilege Escalation vulnerability
- CVE-2025-15655WordPress School Management plugin <= 93.2.0 - SQL Injection vulnerability
- CVE-2025-32303WordPress WPCHURCH plugin <= 2.7.0 - SQL Injection Vulnerability
- CVE-2025-32304WordPress WPCHURCH plugin <= 2.7.0 - Local File Inclusion vulnerability
- CVE-2025-31100WordPress School Management Plugin <= 1.93.1 (02-07-2025) - Arbitrary File Upload Vulnerability
- CVE-2025-48108WordPress School Management Plugin <= 93.2.0 - Broken Access Control Vulnerability
- CVE-2025-32574WordPress WPGYM plugin <= 65.0 - SQL Injection vulnerability
- CVE-2025-24774WordPress WPCRM - CRM for Contact form CF7 & WooCommerce plugin <= 3.2.0 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2025-47574WordPress School Management System Plugin <= 92.0.0 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2025-24773WordPress WPCRM - CRM for Contact form CF7 & WooCommerce plugin <= 3.2.0 - SQL Injection Vulnerability
- CVE-2025-32549WordPress WPGYM <= 65.0 - Local File Inclusion Vulnerability
- CVE-2025-47572WordPress School Management <= 93.0.0 - Local File Inclusion Vulnerability
- CVE-2025-47573WordPress School Management System Plugin <= 92.0.0 - SQL Injection vulnerability
- CVE-2025-47575WordPress School Management plugin <= 92.0.0 - SQL Injection vulnerability
- CVE-2025-47613WordPress School Management System for Wordpress plugin <= 92.0.0 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2025-47631WordPress Hospital Management System plugin <= 47.0(20-11-2023) - Privilege Escalation vulnerability
- CVE-2025-47663WordPress Hospital Management System plugin <= 47.0(20-11-2023) - Arbitrary File Upload vulnerability
- CVE-2025-39357WordPress Hospital Management System plugin <= 47.0(20-11-2023) - SQL Injection vulnerability
- CVE-2025-39380WordPress Hospital Management System plugin <= 47.0(20-11-2023) - Arbitrary File Upload vulnerability
- CVE-2025-39386WordPress Hospital Management System plugin <= 47.0(20-11-2023) - SQL Injection vulnerability
- CVE-2025-39392WordPress WPAMS plugin <= 44.0 (17-08-2023) - Cross Site Scripting (XSS) vulnerability
- CVE-2025-39393WordPress Hospital Management System plugin <= 47.0(20-11-2023) - Cross Site Scripting (XSS) vulnerability
- CVE-2025-39395WordPress WPAMS plugin <= 44.0 (17-08-2023) - SQL Injection vulnerability
- CVE-2025-39401WordPress WPAMS plugin <= 44.0 (17-08-2023) - Arbitrary File Upload vulnerability
- CVE-2025-39402WordPress WPAMS plugin <= 44.0 (17-08-2023) - Arbitrary File Upload vulnerability
- CVE-2025-39403WordPress WPAMS plugin <= 44.0 (17-08-2023) - SQL Injection vulnerability
- CVE-2025-39405WordPress WPAMS plugin <= 44.0 (17-08-2023) - Privilege Escalation vulnerability
- CVE-2025-39406WordPress WPAMS plugin <= 44.0 - Local File Inclusion to Privilege Escalation vulnerability