TI-2026-37834 CVE-2026-52712 · GHSA-9jqg-7fpc-m8xv
WordPress Attendance Manager plugin <= 0.6.2 - SQL Injection vulnerability
Priority LOW 33
Subscriber SQL Injection in Attendance Manager <= 0.6.2 versions.
tnomi
Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
tnomi records in CISA KEVNo tnomi vulnerabilities are listed in CISA KEV.
Records
3 records
TI-2025-26257 CVE-2025-39515 · GHSA-cc5p-3rfr-2p84
WordPress Attendance Manager plugin <= 0.6.2 - Cross Site Scripting (XSS) Vulnerability
Priority LOW 29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tnomi Attendance Manager attendance-manager allows Stored XSS.This issue affects Attendance Manager: from n/a through…
TI-2026-03271 CVE-2026-3781 · GHSA-6j4h-m95w-mr2q
Attendance Manager <= 0.6.2 - Authenticated (Subscriber+) SQL Injection via 'attmgr_off' Parameter
Priority LOW 24
The Attendance Manager plugin for WordPress is vulnerable to SQL Injection via the 'attmgr_off' parameter in all versions up to, and including, 0.6.2.