CVE-2021-24575

8.8 highEPSS 1.4%

High (8.8) in igexsolutions wpschoolpress. EPSS 1.4% chance of exploitation in the next 30 days.

The School Management System – WPSchoolPress WordPress plugin before 2.1.10 does not properly sanitize or use prepared statements before using POST variable in SQL queries, leading to SQL injection in multiple actions available to various authenticated users, from simple subscribers/students to teachers and above.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2021-11-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

igexsolutions:wpschoolpress

References

https://wpscan.com/vulnerability/83c9c3af-9eca-45e0-90d7-edc69e616e6a
https://wpscan.com/vulnerability/83c9c3af-9eca-45e0-90d7-edc69e616e6a

Check your stack JSON