CVE-2024-12612

Name of the Vulnerable Software and Affected Versions: School Management System for Wordpress plugin for WordPress versions prior to 93.2.1

Description: The School Management System for Wordpress plugin for WordPress is vulnerable to SQL Injection via several parameters across multiple AJAX actions due to insufficient escaping of user-supplied parameters and a lack of sufficient preparation of existing SQL queries. This allows unauthenticated attackers to append additional SQL queries, potentially extracting sensitive information from the database.

Recommendations: Update to version 93.2.1 or later.