Student Result or Employee Database, af2fead6-9f8e-4c00-ac50-440de969ca42
- CVE, Research URL
- Home page URL
- Application
- Published on
- -
- Research Description
- Student Result or Employee Database [simple-student-result] < 1.7.5 Student Result or Employee Database < 1.8.0 - Unauthorised REST Calls The plugin has a flawed permission callback in its REST endpoints, allowing unauthenticated attackers to call them and add/edit/delete arbitrary student for example
- Affected versions
-
max 1.7.5.
- Status
-
vulnerable
| Previous vulnerability researches |
|---|
| Elizaibots (CVE-2025-49893) , Aug 20, 2025 |
| Elizaibots (abcf8d2a13b3fd2324a04f9724e5ac9347743677) , Jun 16, 2026 |