CVE Watch22 jul 2026

CVE-2025-15656

Incorrect Privilege Assignment vulnerability in Mojoomla School Management allows Privilege Escalation. This issue affects School Managemen

CVSS

8.8

Alto

EPSS

0.2%

p14

KEV

—

Exploit Today

0-100

Publicado: 3 jun 2026 · Última mod.: 22 jul 2026 · CWE-266

EPSS · 30d

0.2%EPSS · 30 días0.2%

2026-07-282026-08-24

Descripción técnica

Incorrect Privilege Assignment vulnerability in Mojoomla School Management allows Privilege Escalation. This issue affects School Management: from n/a through 93.2.0.

Referencias oficiales

patchstack.comhttps://patchstack.com/database/wordpress/plugin/school-management/vulnerability/wordpress-school-management-plugin-93-2-0-privilege-escalation-vulnerability?_s_id=cve

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-782679.8 CRÍ

—

——0Unauthenticated Privilege Escalation in TranslatePress <= 3.3.2 versions.1d CVE-2026-325618.8 ALT

—

——0Subscriber Privilege Escalation in Booking Hub <= 1.3.0 versions.9h CVE-2026-217567.2 ALT

—

——0HCL Hive is affected by a broken access control vulnerability which could allow an attacker or unauthorized user to introduce unverified, malicious, or broken code directly into production environments.2d CVE-2026-666489.8 CRÍ

—

——0Unauthenticated Privilege Escalation in Jawn <= 1.4.2 versions.2d CVE-2026-325589.8 CRÍ

—

——0Unauthenticated Privilege Escalation in Affiliate Pro - Affiliate Program for WooCommerce & WordPress <= 8.9.1 versions.2d CVE-2026-281659.8 CRÍ

—

——0Unauthenticated Privilege Escalation in Digits <= 9.2 versions.2d