Skip to content
OpenAdvisories
Medium · 4.9 CVE-2026-39631 EUVD-2026-20282GHSA-4qx4-3c96-wjpr

WordPress WPSchoolPress plugin <= 2.2.35 - Broken Access Control vulnerability

Published Apr 8, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in Ronik@UnlimitedWP WPSchoolPress wpschoolpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPSchoolPress: from n/a through <= 2.2.35.

Affected products

VendorProductAffectedFixed
Ronik@UnlimitedWP WPSchoolPress ≤ 2.2.35 —

References