Student Result or Employee Database, CVE-2017-14766

CVE, Research URL: CVE-2017-14766
Home page URL: Security reports for Student Result or Employee Database
Application: Student Result or Employee Database
Published on: Sep 27, 2017
Research Description: The Simple Student Result plugin before 1.6.4 for WordPress has an Authentication Bypass vulnerability because the fn_ssr_add_st_submit() function and fn_ssr_del_st_submit() function in functions.php only require knowing the student id number.
Affected versions: max 1.6.4.
Status: vulnerable