A vulnerability described as critical has been identified in School Management System Plugin up to 93.1.0 on WordPress. Affected by this issue is some unknown functionality. Such manipulation leads to improper control of resource identifiers.
This vulnerability is documented as CVE-2025-49896. The attack can be executed remotely. There is not any exploit available.
