https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T08:09:54.684000+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-289220 EUVD-2026-289220 2026-10-08T08:09:54.686068+00:00 EUVD-2026-289220 https://cve.radiocsirt.org/vuln/fkie_cve-2025-1667 fkie_cve-2025-1667 2026-10-08T08:09:54.686100+00:00

The School Management System – WPSchoolPress plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the wpsp_UpdateTeacher() function in all versions up to, and including, 2.2.16. This makes it possible for authenticated attackers, with teacher-level access and above, to update arbitrary user details including email which makes it possible to request a password reset and access arbitrary user accounts, including administrators.

 https://cve.radiocsirt.org/vuln/ghsa-4mr4-q2q7-hmgc GHSA-4mr4-q2q7-hmgc 2026-10-08T08:09:54.686133+00:00

The School Management System – WPSchoolPress plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the wpsp_UpdateTeacher() function in all versions up to, and including, 2.2.16. This makes it possible for authenticated attackers, with teacher-level access and above, to update arbitrary user details including email which makes it possible to request a password reset and access arbitrary user accounts, including administrators.