Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2022-1609

The School Management WordPress plugin before 9.9.7 contains an obfuscated backdoor injected in it's license checking code that registers a REST API handler, allowing an unauthenticated attacker to execute arbitrary PHP code on the site.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.929
EPSS Ranking 99.8%
CVSS Severity
CVSS v3 Score 9.8
Products affected by CVE-2022-1609


Contact Us

Shodan ® - All rights reserved