Skip to content
OpenAdvisories

Vendor

mojoomla

31 known vulnerabilities.

Products

School Management 10 WPAMS 8 Hospital Management System 6 WPGYM 3 WPCRM - CRM for Contact form CF7 & WooCommerce 2 WPCHURCH 2
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-15657

    WordPress School Management plugin <= 93.1.0 - Insecure Direct Object References (IDOR) vulnerability

    Unauthenticated Insecure Direct Object References (IDOR) in School Management <= 93.1.0 versions.

    mojoomla School Management
  • Medium 6.5
    CVE-2026-39433

    WordPress WPAMS plugin < 49.5.3 - Arbitrary Content Deletion vulnerability

    Subscriber Arbitrary Content Deletion in WPAMS < 49.5.3 versions.

    mojoomla WPAMS
  • Medium 6.5
    CVE-2025-48108

    WordPress School Management Plugin <= 93.2.0 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in Mojoomla School Management allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects School Management: from n/a through 93.2.0.

    mojoomla School Management