igexsolutions records

9 published records for vendor igexsolutions.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

9 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2021-24575No exploit	WPSchoolPress < 2.1.10 - Multiple Authenticated SQL Injectionsigexsolutions · wpschoolpress · CWE-89 SQL injection	High8.8	—	1.4%	Nov 8, 2021
35Monitor	CVE-2023-4776No exploit	WPSchoolPress < 2.2.5 - Teacher+ SQLiigexsolutions · wpschoolpress · CWE-89 SQL injection	High8.8	—	0.7%	Oct 16, 2023
35Monitor	CVE-2024-9637No exploit	School Management System – WPSchoolPress <= 2.2.10 - Insecure Direct Object Reference to Authenticated (Teacher+) Account Takeover/Privilege Escalationigexsolutions · wpschoolpress · CWE-639 Broken access control (IDOR)	High8.8	—	0.5%	Oct 26, 2024
26Monitor	CVE-2024-12332No exploit	School Management System – WPSchoolPress <= 2.2.14 - Authenticated (Student/Parent+) SQL Injectionigexsolutions · wpschoolpress · CWE-89 SQL injection	Medium6.5	—	0.4%	Jan 7, 2025
26Monitor	CVE-2025-1669No exploit	School Management System – WPSchoolPress <= 2.2.17 - Authenticated (Teacher+) SQL Injectionigexsolutions · wpschoolpress · CWE-89 SQL injection	Medium6.5	—	0.4%	Mar 15, 2025
26Monitor	CVE-2025-1670No exploit	School Management System – WPSchoolPress <= 2.2.16 - Authenticated (Parent+) SQL Injectionigexsolutions · wpschoolpress · CWE-89 SQL injection	Medium6.5	—	0.4%	Mar 15, 2025
21Monitor	CVE-2025-1668No exploit	School Management System – WPSchoolPress <= 2.2.16 - Missing Authorization to Arbitrary User Deletionigexsolutions · wpschoolpress · CWE-862 Broken access control (IDOR)	Medium5.4	—	0.3%	Mar 15, 2025
20Monitor	CVE-2021-24664Proof of concept	WPSchoolPress < 2.1.17 - Multiple Admin+ Stored Cross-Site Scriptingigexsolutions · wpschoolpress · CWE-79 XSS	Medium4.8	—	2.4%	Nov 8, 2021
17Monitor	CVE-2025-1667No exploit	School Management System – WPSchoolPress <= 2.2.16 - Missing Authorization to Privilege Escalation via Account Takeoverigexsolutions · wpschoolpress · CWE-639 Broken access control (IDOR)	Medium4.3	—	0.4%	Mar 15, 2025

CVE-2021-24575
35Monitor
WPSchoolPress < 2.1.10 - Multiple Authenticated SQL Injections
HighCVSS 8.8No exploitEPSS 1%
- SQL injection
igexsolutions · wpschoolpressNov 8, 2021
CVE-2023-4776
35Monitor
WPSchoolPress < 2.2.5 - Teacher+ SQLi
HighCVSS 8.8No exploitEPSS 1%
- SQL injection
igexsolutions · wpschoolpressOct 16, 2023
CVE-2024-9637
35Monitor
School Management System – WPSchoolPress <= 2.2.10 - Insecure Direct Object Reference to Authenticated (Teacher+) Account Takeover/Privilege Escalation
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
igexsolutions · wpschoolpressOct 26, 2024
CVE-2024-12332
26Monitor
School Management System – WPSchoolPress <= 2.2.14 - Authenticated (Student/Parent+) SQL Injection
MediumCVSS 6.5No exploitEPSS 0%
- SQL injection
igexsolutions · wpschoolpressJan 7, 2025
CVE-2025-1669
26Monitor
School Management System – WPSchoolPress <= 2.2.17 - Authenticated (Teacher+) SQL Injection
MediumCVSS 6.5No exploitEPSS 0%
- SQL injection
igexsolutions · wpschoolpressMar 15, 2025
CVE-2025-1670
26Monitor
School Management System – WPSchoolPress <= 2.2.16 - Authenticated (Parent+) SQL Injection
MediumCVSS 6.5No exploitEPSS 0%
- SQL injection
igexsolutions · wpschoolpressMar 15, 2025
CVE-2025-1668
21Monitor
School Management System – WPSchoolPress <= 2.2.16 - Missing Authorization to Arbitrary User Deletion
MediumCVSS 5.4No exploitEPSS 0%
- Broken access control (IDOR)
igexsolutions · wpschoolpressMar 15, 2025
CVE-2021-24664
20Monitor
WPSchoolPress < 2.1.17 - Multiple Admin+ Stored Cross-Site Scripting
MediumCVSS 4.8Proof of conceptEPSS 2%
- XSS
igexsolutions · wpschoolpressNov 8, 2021
CVE-2025-1667
17Monitor
School Management System – WPSchoolPress <= 2.2.16 - Missing Authorization to Privilege Escalation via Account Takeover
MediumCVSS 4.3No exploitEPSS 0%
- Broken access control (IDOR)
igexsolutions · wpschoolpressMar 15, 2025