CVEs we hold for Mojoomla
Records whose assigning authority named Mojoomla as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-39433WordPress WPAMS plugin < 49.5.3 - Arbitrary Content Deletion vulnerabilitymojoomla WPAMS
CVE-2025-48108WordPress School Management Plugin <= 93.2.0 - Broken Access Control VulnerabilityMojoomla School Management
CVE-2025-47663WordPress Hospital Management System plugin <= 47.0(20-11-2023) - Arbitrary File Upload vulnerabilitymojoomla Hospital Management System
CVE-2025-47631WordPress Hospital Management System plugin <= 47.0(20-11-2023) - Privilege Escalation vulnerabilitymojoomla Hospital Management System
CVE-2025-47613WordPress School Management System for Wordpress plugin <= 92.0.0 - Reflected Cross Site Scripting (XSS) vulnerabilitymojoomla School Management
CVE-2025-47575WordPress School Management plugin <= 92.0.0 - SQL Injection vulnerabilitymojoomla School Management
CVE-2025-47574WordPress School Management System Plugin <= 92.0.0 - Reflected Cross Site Scripting (XSS) vulnerabilitymojoomla School Management
CVE-2025-47573WordPress School Management System Plugin <= 92.0.0 - SQL Injection vulnerabilitymojoomla School Management
CVE-2025-47572WordPress School Management <= 93.0.0 - Local File Inclusion Vulnerabilitymojoomla School Management
CVE-2025-39406WordPress WPAMS plugin <= 44.0 - Local File Inclusion to Privilege Escalation vulnerabilitymojoomla WPAMS
CVE-2025-39405WordPress WPAMS plugin <= 44.0 (17-08-2023) - Privilege Escalation vulnerabilitymojoomla WPAMS
CVE-2025-39403WordPress WPAMS plugin <= 44.0 (17-08-2023) - SQL Injection vulnerabilitymojoomla WPAMS
CVE-2025-39402WordPress WPAMS plugin <= 44.0 (17-08-2023) - Arbitrary File Upload vulnerabilitymojoomla WPAMS
CVE-2025-39401WordPress WPAMS plugin <= 44.0 (17-08-2023) - Arbitrary File Upload vulnerabilitymojoomla WPAMS
CVE-2025-39395WordPress WPAMS plugin <= 44.0 (17-08-2023) - SQL Injection vulnerabilitymojoomla WPAMS
CVE-2025-39393WordPress Hospital Management System plugin <= 47.0(20-11-2023) - Cross Site Scripting (XSS) vulnerabilitymojoomla Hospital Management System
CVE-2025-39392WordPress WPAMS plugin <= 44.0 (17-08-2023) - Cross Site Scripting (XSS) vulnerabilitymojoomla WPAMS
CVE-2025-39386WordPress Hospital Management System plugin <= 47.0(20-11-2023) - SQL Injection vulnerabilitymojoomla Hospital Management System
CVE-2025-39380WordPress Hospital Management System plugin <= 47.0(20-11-2023) - Arbitrary File Upload vulnerabilitymojoomla Hospital Management System
CVE-2025-39357WordPress Hospital Management System plugin <= 47.0(20-11-2023) - SQL Injection vulnerabilitymojoomla Hospital Management System
CVE-2025-32304WordPress WPCHURCH plugin <= 2.7.0 - Local File Inclusion vulnerabilityMojoomla WPCHURCH
CVE-2025-31100WordPress School Management Plugin <= 1.93.1 (02-07-2025) - Arbitrary File Upload VulnerabilityMojoomla School Management
CVE-2025-24774WordPress WPCRM - CRM for Contact form CF7 & WooCommerce plugin <= 3.2.0 - Reflected Cross Site Scripting (XSS)…mojoomla WPCRM - CRM for Contact form CF7 & WooCommerce
CVE-2025-24773WordPress WPCRM - CRM for Contact form CF7 & WooCommerce plugin <= 3.2.0 - SQL Injection Vulnerabilitymojoomla WPCRM - CRM for Contact form CF7 & WooCommerce
CVE-2025-15657WordPress School Management plugin <= 93.1.0 - Insecure Direct Object References (IDOR) vulnerabilityMojoomla School Management
CVE-2025-15656WordPress School Management plugin <= 93.2.0 - Privilege Escalation vulnerabilityMojoomla School Management
CVE-2025-15655WordPress School Management plugin <= 93.2.0 - SQL Injection vulnerabilityMojoomla School Management
31 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.