CVE-2022-2381: E Unlocked - Student Result Project E Unlocked - Student Result

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

The E Unlocked - Student Result WordPress plugin through 1.0.4 is lacking CSRF and validation when uploading the School logo, which could allow attackers to make a logged in admin upload arbitrary files, such as PHP via a CSRF attack

Affected products

• E Unlocked - Student Result Project E Unlocked - Student Result: up to and including 1.0.4

Published 2022-08-15. Last modified 2026-06-17.