Vulnerabilities in mojoomla
31 resultsVexday analysis
Mojoomla possui 24 vulnerabilidades registradas, sendo 10 de severidade crítica, predominantemente injeção SQL (CWE-89), embora nenhuma esteja sob exploração ativa no momento. O risco permanece significativo pela quantidade de falhas críticas já conhecidas, apesar da atividade de divulgação ter desacelerado—apenas 1 CVE nos últimos 90 dias.
CVE-2025-39357HIGHWordPress Hospital Management System plugin <= 47.0(20-11-2023) - SQL Injection vulnerabilityEPSS 0.3%CVE-2025-47613HIGHWordPress School Management System for Wordpress plugin <= 92.0.0 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-32303CRITICALWordPress WPCHURCH plugin <= 2.7.0 - SQL Injection VulnerabilityEPSS 0.2%CVE-2025-15656HIGHWordPress School Management plugin <= 93.2.0 - Privilege Escalation vulnerabilityEPSS 0.2%CVE-2025-15655HIGHWordPress School Management plugin <= 93.2.0 - SQL Injection vulnerabilityEPSS 0.2%CVE-2025-15657MEDIUMWordPress School Management plugin <= 93.1.0 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.2%CVE-2025-24774HIGHWordPress WPCRM - CRM for Contact form CF7 & WooCommerce plugin <= 3.2.0 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-48108MEDIUMWordPress School Management Plugin <= 93.2.0 - Broken Access Control VulnerabilityEPSS 0.2%CVE-2025-47574HIGHWordPress School Management System Plugin <= 92.0.0 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-39393HIGHWordPress Hospital Management System plugin <= 47.0(20-11-2023) - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-39392HIGHWordPress WPAMS plugin <= 44.0 (17-08-2023) - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%