Pricing
Case studies
Login
Start trial
School Management
EPC
Developer
N/A
Latest version
N/A
Installations
N/A
Last updated
WordPress Plugin
Active VDP
Report vulnerability
Vulnerabilities
Security Policy
Security Contributors
Vulnerability history
15 present
6 patched
16 Mitigation rules
Authenticated (Student+) Arbitrary File Upload vulnerability
<= 91.5.0
04/02/2026
Authenticated (Student+) Arbitrary File Upload vulnerability
<= 93.2.0
31/12/2025
Unauthenticated SQL Injection vulnerability
<= 93.2.0
16/08/2025
Broken Access Control Vulnerability
<= 93.2.0
15/08/2025
Insecure Direct Object References (IDOR) Vulnerability
<= 93.1.0
15/08/2025
SQL Injection Vulnerability
<= 93.2.0
15/08/2025
Arbitrary File Upload Vulnerability
<= 1.93.1 (02-07-2025)
12/08/2025
Authenticated (Subscriber+) Local File Inclusion to Privilege Escalation via Password Update vulnerability
<= 93.1.0
18/07/2025
Reflected Cross Site Scripting (XSS) vulnerability
<= 92.0.0
18/06/2025
Privilege Escalation Vulnerability
<= 93.2.0
17/06/2025
Local File Inclusion Vulnerability
<= 93.0.0
12/06/2025
SQL Injection vulnerability
<= 92.0.0
11/06/2025
SQL Injection vulnerability
<= 92.0.0
20/05/2025
Reflected Cross Site Scripting (XSS) vulnerability
<= 92.0.0
20/05/2025
Authenticated (Subscriber+) SQL Injection via 'mj_smgt_show_event_task' vulnerability
<= 92.0.0
07/03/2025
Authenticated (Student+) SQL Injection via 'view-attendance' vulnerability
<= 92.0.0
06/03/2025
Missing Authorization to Unauthenticated Arbitrary Post Deletion vulnerability
<= 93.0.0
06/03/2025
Reflected Cross-Site Scripting vulnerability
<= 93.0.0
06/03/2025
Authenticated (Student+) Account Takeover and Privilege Escalation vulnerability
<= 93.0.0
06/03/2025
Unauthenticated Arbitrary File Upload vulnerability
<= 91.5.0
22/11/2024
Cross-Site Request Forgery (CSRF) and Stored Cross-Site Scripting (XSS) vulnerabilities
< 57.0
13/07/2019