CVE Tools
Track your stack

Mojoomla

22 CVEs tracked since 2025. Since May 2025, none of them reached CISA KEV.

Mojoomla CVEs per month

May 2025 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Mojoomla CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2025-05160
2025-0660
2025-075 or fewer
2025-084 or fewer
2025-094 or fewer
2025-104 or fewer
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-106 or fewer

Products

The products that kept showing up in Mojoomla's monthly top three, with their CVEs summed over those months.

  1. Wpams71 month
  2. Hospital Management System61 month
  3. School Management52 months
  4. Wpcrm - Crm For Contact Form CF7 & Woocommerce21 month
  5. Wpgym11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Mojoomla.

  1. CVE-2025-15657WordPress School Management plugin <= 93.1.0 - Insecure Direct Object References (IDOR) vulnerability5.3
  2. CVE-2026-39433WordPress WPAMS plugin < 49.5.3 - Arbitrary Content Deletion vulnerability6.5
  3. CVE-2025-15656WordPress School Management plugin <= 93.2.0 - Privilege Escalation vulnerability8.8
  4. CVE-2025-15655WordPress School Management plugin <= 93.2.0 - SQL Injection vulnerability7.6
  5. CVE-2025-32303WordPress WPCHURCH plugin <= 2.7.0 - SQL Injection Vulnerability9.3
  6. CVE-2025-32304WordPress WPCHURCH plugin <= 2.7.0 - Local File Inclusion vulnerability8.1
  7. CVE-2025-31100WordPress School Management Plugin <= 1.93.1 (02-07-2025) - Arbitrary File Upload Vulnerability9.9
  8. CVE-2025-48108WordPress School Management Plugin <= 93.2.0 - Broken Access Control Vulnerability6.5
  9. CVE-2025-32574WordPress WPGYM plugin <= 65.0 - SQL Injection vulnerability8.5
  10. CVE-2025-24774WordPress WPCRM - CRM for Contact form CF7 & WooCommerce plugin <= 3.2.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1
  11. CVE-2025-47574WordPress School Management System Plugin <= 92.0.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1
  12. CVE-2025-24773WordPress WPCRM - CRM for Contact form CF7 & WooCommerce plugin <= 3.2.0 - SQL Injection Vulnerability9.3
  13. CVE-2025-32549WordPress WPGYM <= 65.0 - Local File Inclusion Vulnerability7.5
  14. CVE-2025-47572WordPress School Management <= 93.0.0 - Local File Inclusion Vulnerability7.5
  15. CVE-2025-47573WordPress School Management System Plugin <= 92.0.0 - SQL Injection vulnerability9.3

The record

Peak rank
#53 in May 2025
Busiest month shown
May 2025, 16 CVEs
Months with a KEV entry
0 since May 2025
Monthly snapshots
2 since 2025
Mojoomla's full record, month by month