Skip to content
OpenAdvisories

Vendor

mojoomla

31 known vulnerabilities.

Products

School Management 10 WPAMS 8 Hospital Management System 6 WPGYM 3 WPCRM - CRM for Contact form CF7 & WooCommerce 2 WPCHURCH 2
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Critical 9.3
    CVE-2025-32303

    WordPress WPCHURCH plugin <= 2.7.0 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mojoomla WPCHURCH allows Blind SQL Injection.This issue affects WPCHURCH: from n/a through 2.7.0.

    mojoomla WPCHURCH
  • Critical 9.9
    CVE-2025-31100

    WordPress School Management Plugin <= 1.93.1 (02-07-2025) - Arbitrary File Upload Vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in Mojoomla School Management allows Upload a Web Shell to a Web Server.This issue affects School Management: from n/a through 1.93.1 (02-07-2025).

    mojoomla School Management
  • Critical 9.3
    CVE-2025-24773

    WordPress WPCRM - CRM for Contact form CF7 & WooCommerce plugin <= 3.2.0 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mojoomla WPCRM - CRM for Contact form CF7 & WooCommerce wpcrm allows SQL Injection.This issue affects WPCRM - CRM for Contact form CF7 & WooCommerce: from n/…

    mojoomla WPCRM - CRM for Contact form CF7 & WooCommerce Web / CMS
  • Critical 9.3
    CVE-2025-47573

    WordPress School Management System Plugin <= 92.0.0 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mojoomla School Management allows Blind SQL Injection. This issue affects School Management: from n/a through 92.0.0.

    mojoomla School Management
  • Critical 9.9
    CVE-2025-47663

    WordPress Hospital Management System plugin <= 47.0(20-11-2023) - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in mojoomla Hospital Management System allows Upload a Web Shell to a Web Server. This issue affects Hospital Management System: from 47.0(20 through 11.

    mojoomla Hospital Management System
  • Critical 10.0
    CVE-2025-39380

    WordPress Hospital Management System plugin <= 47.0(20-11-2023) - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in mojoomla Hospital Management System hospital-management allows Upload a Web Shell to a Web Server.This issue affects Hospital Management System: from n/a through <= 47.0(20-11-2023).

    mojoomla Hospital Management System
  • Critical 9.3
    CVE-2025-39386

    WordPress Hospital Management System plugin <= 47.0(20-11-2023) - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mojoomla Hospital Management System hospital-management allows SQL Injection.This issue affects Hospital Management System: from n/a through <= 47.0(20-11-20…

    mojoomla Hospital Management System
  • Critical 9.3
    CVE-2025-39395

    WordPress WPAMS plugin <= 44.0 (17-08-2023) - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mojoomla WPAMS apartment-management allows SQL Injection.This issue affects WPAMS: from n/a through <= 44.0 (17-08-2023).

    mojoomla WPAMS
  • Critical 10.0
    CVE-2025-39401 Public exploit

    WordPress WPAMS plugin <= 44.0 (17-08-2023) - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in mojoomla WPAMS apartment-management allows Upload a Web Shell to a Web Server.This issue affects WPAMS: from n/a through <= 44.0 (17-08-2023).

    mojoomla WPAMS
  • Critical 9.9
    CVE-2025-39402

    WordPress WPAMS plugin <= 44.0 (17-08-2023) - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in mojoomla WPAMS apartment-management allows Upload a Web Shell to a Web Server.This issue affects WPAMS: from n/a through <= 44.0 (17-08-2023).

    mojoomla WPAMS
  • Critical 9.8
    CVE-2025-39406

    WordPress WPAMS plugin <= 44.0 - Local File Inclusion to Privilege Escalation vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in mojoomla WPAMS apartment-management allows PHP Local File Inclusion.This issue affects WPAMS: from n/a through <= 44.0.

    mojoomla WPAMS
  • Critical 9.3
    CVE-2025-32643

    WordPress WPGYM Plugin <= 65.0 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mojoomla WPGYM allows Blind SQL Injection. This issue affects WPGYM: from n/a through 65.0.

    mojoomla WPGYM