PT-2026-45911 · Unknown · Mojoomla School Management

CVE-2025-15656 · Published 2026-06-03 · Updated 2026-06-04

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Mojoomla School Management versions prior to 93.2.1

Description Incorrect Privilege Assignment in the Mojoomla School Management plugin allows for Privilege Escalation, which occurs when a user is granted more permissions than intended, enabling them to perform unauthorized actions.

Recommendations Update to a version later than 93.2.0.

Fix

LPE

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

CVE-2025-15656

Affected Products

Mojoomla School Management

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-15656 · Security Note
• https://twitter.com/TheRabbitPy/status/2062464194599924033 · Twitter Post
• https://t.me/CVEtracker/55694 · Telegram Post
• https://patchstack.com/database/wordpress/plugin/school-management/vulnerability/wordpress-school-management-plugin-93-2-0-privilege-escalation-vulnerability?_s_id=cve · Note