CVE WatchJul 22, 2026

CVE-2025-15656

Incorrect Privilege Assignment vulnerability in Mojoomla School Management allows Privilege Escalation. This issue affects School Managemen

CVSS

8.8

High

EPSS

0.2%

p14

KEV

—

Exploit Today

0-100

Published: Jun 3, 2026 · Last modified: Jul 22, 2026 · CWE-266

EPSS · 30d

0.2%EPSS · 30 days0.2%

2026-07-282026-08-24

Technical description

Incorrect Privilege Assignment vulnerability in Mojoomla School Management allows Privilege Escalation. This issue affects School Management: from n/a through 93.2.0.

Official references

patchstack.comhttps://patchstack.com/database/wordpress/plugin/school-management/vulnerability/wordpress-school-management-plugin-93-2-0-privilege-escalation-vulnerability?_s_id=cve

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-782679.8 CRI

—

——0Unauthenticated Privilege Escalation in TranslatePress <= 3.3.2 versions.1d CVE-2026-325618.8 HIG

—

——0Subscriber Privilege Escalation in Booking Hub <= 1.3.0 versions.9h CVE-2026-217567.2 HIG

—

——0HCL Hive is affected by a broken access control vulnerability which could allow an attacker or unauthorized user to introduce unverified, malicious, or broken code directly into production environments.2d CVE-2026-666489.8 CRI

—

——0Unauthenticated Privilege Escalation in Jawn <= 1.4.2 versions.2d CVE-2026-325589.8 CRI

—

——0Unauthenticated Privilege Escalation in Affiliate Pro - Affiliate Program for WooCommerce & WordPress <= 8.9.1 versions.2d CVE-2026-281659.8 CRI

—

——0Unauthenticated Privilege Escalation in Digits <= 9.2 versions.2d