The School Management System – WPSchoolPress plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the wpsp_UpdateTeacher() function in all versions up to, and including, 2.2.16. This makes it possible for authenticated attackers, with teacher-level access and above, to update arbitrary user details including email which makes it possible to request a password reset and access arbitrary user accounts, including administrators.
References
Configurations
History
28 Mar 2025, 12:46
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-862 | |
| First Time |
Igexsolutions wpschoolpress
Igexsolutions |
|
| CPE | cpe:2.3:a:igexsolutions:wpschoolpress:*:*:*:*:*:wordpress:*:* | |
| References | () https://plugins.trac.wordpress.org/browser/wpschoolpress/tags/2.2.16/lib/wpsp-ajaxworks-teacher.php#L544 - Product | |
| References | () https://www.wordfence.com/threat-intel/vulnerabilities/id/e54f98bc-c538-4f3c-b24a-6e778a3748ef?source=cve - Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.3 |
15 Mar 2025, 04:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-03-15 04:15
Updated : 2025-03-28 12:46
NVD link : CVE-2025-1667
Mitre link : CVE-2025-1667
JSON object : View
Products Affected
igexsolutions
- wpschoolpress