Mojoomla vulnerabilities

Products

• School Management 10
• Wpams 8
• Hospital Management System 6
• Wpchurch 4
• Wpgym 3
• Wordpress Gym Management System 2
• Wpcrm - Crm For Contact Form Cf7 & Woocommerce 2

Newest

• mojoomla school management WordPress School Management plugin <= 93.1.0 - Insecure Direct Object References (IDOR) vulnerability CVE-2025-15657 5.3 MediumJune 17, 2026
• mojoomla wpams WordPress WPAMS plugin < 49.5.3 - Arbitrary Content Deletion vulnerability CVE-2026-39433 6.5 MediumJune 16, 2026
• mojoomla school management WordPress School Management plugin <= 93.2.0 - Privilege Escalation vulnerability CVE-2025-15656 8.8 HighJune 3, 2026
• mojoomla school management WordPress School Management plugin <= 93.2.0 - SQL Injection vulnerability CVE-2025-15655 7.6 HighJune 3, 2026
• mojoomla wpchurch WordPress WPCHURCH plugin <= 2.7.0 - SQL Injection Vulnerability CVE-2025-32303 9.3 CriticalJanuary 7, 2026
• dasinfomedia wpchurch WordPress WPCHURCH plugin <= 2.7.0 - Privilege Escalation Vulnerability CVE-2025-31643 8.8 HighJanuary 7, 2026
• dasinfomedia wpchurch WordPress WPCHURCH plugin <= 2.7.0 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-31642 7.1 HighJanuary 6, 2026
• mojoomla wpchurch WordPress WPCHURCH plugin <= 2.7.0 - Local File Inclusion vulnerability CVE-2025-32304 8.1 HighJanuary 6, 2026
• mojoomla school management WordPress School Management Plugin <= 1.93.1 (02-07-2025) - Arbitrary File Upload Vulnerability CVE-2025-31100 9.9 CriticalAugust 31, 2025
• mojoomla school management WordPress School Management Plugin <= 93.2.0 - Broken Access Control Vulnerability CVE-2025-48108 6.5 MediumAugust 26, 2025
• mojoomla wpgym WordPress WPGYM plugin <= 65.0 - SQL Injection vulnerability CVE-2025-32574 8.5 HighJuly 16, 2025
• mojoomla wpcrm - crm for contact form cf7 & woocommerce WordPress WPCRM - CRM for Contact form CF7 & WooCommerce plugin <= 3.2.0 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-24774 7.1 HighJune 27, 2025
• mojoomla school management WordPress School Management System Plugin <= 92.0.0 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-47574 7.1 HighJune 27, 2025
• mojoomla wpcrm - crm for contact form cf7 & woocommerce WordPress WPCRM - CRM for Contact form CF7 & WooCommerce plugin <= 3.2.0 - SQL Injection Vulnerability CVE-2025-24773 9.3 CriticalJune 17, 2025
• mojoomla wpgym WordPress WPGYM <= 65.0 - Local File Inclusion Vulnerability CVE-2025-32549 7.5 HighJune 17, 2025
• mojoomla school management WordPress School Management <= 93.0.0 - Local File Inclusion Vulnerability CVE-2025-47572 7.5 HighJune 17, 2025
• mojoomla school management WordPress School Management System Plugin <= 92.0.0 - SQL Injection vulnerability CVE-2025-47573 9.3 CriticalJune 17, 2025
• mojoomla school management WordPress School Management plugin <= 92.0.0 - SQL Injection vulnerability CVE-2025-47575 8.5 HighMay 23, 2025
• mojoomla school management WordPress School Management System for Wordpress plugin <= 92.0.0 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-47613 7.1 HighMay 23, 2025
• mojoomla hospital management system WordPress Hospital Management System plugin <= 47.0(20-11-2023) - Privilege Escalation vulnerability CVE-2025-47631 8.8 HighMay 23, 2025
• mojoomla hospital management system WordPress Hospital Management System plugin <= 47.0(20-11-2023) - Arbitrary File Upload vulnerability CVE-2025-47663 9.9 CriticalMay 23, 2025
• mojoomla hospital management system WordPress Hospital Management System plugin <= 47.0(20-11-2023) - SQL Injection vulnerability CVE-2025-39357 8.5 HighMay 19, 2025
• mojoomla hospital management system WordPress Hospital Management System plugin <= 47.0(20-11-2023) - Arbitrary File Upload vulnerability CVE-2025-39380 10.0 CriticalMay 19, 2025
• mojoomla hospital management system WordPress Hospital Management System plugin <= 47.0(20-11-2023) - SQL Injection vulnerability CVE-2025-39386 9.3 CriticalMay 19, 2025
• mojoomla wpams WordPress WPAMS plugin <= 44.0 (17-08-2023) - Cross Site Scripting (XSS) vulnerability CVE-2025-39392 7.1 HighMay 19, 2025
• mojoomla hospital management system WordPress Hospital Management System plugin <= 47.0(20-11-2023) - Cross Site Scripting (XSS) vulnerability CVE-2025-39393 7.1 HighMay 19, 2025
• mojoomla wpams WordPress WPAMS plugin <= 44.0 (17-08-2023) - SQL Injection vulnerability CVE-2025-39395 9.3 CriticalMay 19, 2025
• mojoomla wpams WordPress WPAMS plugin <= 44.0 (17-08-2023) - Arbitrary File Upload vulnerability CVE-2025-39401 Public exploit 10.0 CriticalMay 19, 2025
• mojoomla wpams WordPress WPAMS plugin <= 44.0 (17-08-2023) - Arbitrary File Upload vulnerability CVE-2025-39402 9.9 CriticalMay 19, 2025
• mojoomla wpams WordPress WPAMS plugin <= 44.0 (17-08-2023) - SQL Injection vulnerability CVE-2025-39403 8.5 HighMay 19, 2025
• mojoomla wpams WordPress WPAMS plugin <= 44.0 (17-08-2023) - Privilege Escalation vulnerability CVE-2025-39405 8.8 HighMay 19, 2025
• mojoomla wpams WordPress WPAMS plugin <= 44.0 - Local File Inclusion to Privilege Escalation vulnerability CVE-2025-39406 9.8 CriticalMay 19, 2025
• mojoomla wpgym WordPress WPGYM Plugin <= 65.0 - SQL Injection vulnerability CVE-2025-32643 9.3 CriticalMay 16, 2025
• dasinfomedia wpgym - wordpress gym management system, mojoomla wordpress gym management system, dasinfomedia wpgym gym management system +2 more WPGYM <= 67.1.0 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation CVE-2024-9941 8.8 HighNovember 23, 2024
• dasinfomedia wpgym - wordpress gym management system, mojoomla wordpress gym management system, dasinfomedia wpgym gym management system +2 more WPGYM <= 67.1.0 - Unauthenticated Arbitrary File Upload CVE-2024-9942 9.8 CriticalNovember 23, 2024