Vulnerabilities

TI-2026-37834 CVE-2026-52712 · GHSA-9jqg-7fpc-m8xv

WordPress Attendance Manager plugin <= 0.6.2 - SQL Injection vulnerability

LOW 33

Subscriber SQL Injection in Attendance Manager <= 0.6.2 versions.

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.00228 Published 2026-06-16 No fix listed CWE-89

TI-2026-03271 CVE-2026-3781 · GHSA-6j4h-m95w-mr2q

Attendance Manager <= 0.6.2 - Authenticated (Subscriber+) SQL Injection via 'attmgr_off' Parameter

LOW 24

The Attendance Manager plugin for WordPress is vulnerable to SQL Injection via the 'attmgr_off' parameter in all versions up to, and including, 0.6.2.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00186 Published 2026-04-08 No fix listed CWE-89

TI-2025-26257 CVE-2025-39515 · GHSA-cc5p-3rfr-2p84

WordPress Attendance Manager plugin <= 0.6.2 - Cross Site Scripting (XSS) Vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tnomi Attendance Manager attendance-manager allows Stored XSS.This issue affects Attendance Manager: from n/a through…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0036 Published 2025-04-16 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Attendance Manager plugin <= 0.6.2 - SQL Injection vulnerability

Attendance Manager <= 0.6.2 - Authenticated (Subscriber+) SQL Injection via 'attmgr_off' Parameter

WordPress Attendance Manager plugin <= 0.6.2 - Cross Site Scripting (XSS) Vulnerability