Arbitrary File Upload Vulnerability in School Management System Plugin for WordPress

CVE-2025-6079

What is CVE-2025-6079?

The School Management System for WordPress contains a vulnerability that permits authenticated users, with Student-level access or higher, to bypass file type validation in the homework.php file. This flaw enables these users to upload arbitrary files onto the server, potentially leading to unauthorized remote code execution. Site administrators are advised to review and patch their installations to prevent exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References