Description
WordPress Plugin Student Result or Employee Database is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently update or delete student records with knowledge of only the student id number. WordPress Plugin Student Result or Employee Database version 1.6.3 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.6.4 or latest
References
https://limbenjamin.com/articles/simple-student-result-auth-bypass.html
https://plugins.svn.wordpress.org/simple-student-result/trunk/readme.txt
Related Vulnerabilities
WordPress 4.9.x Prototype Pollution (4.9 - 4.9.19)
WordPress 4.6.x Multiple Vulnerabilities (4.6 - 4.6.25)
Jboss EAP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-4112)
WordPress Plugin WordPress Ping Optimizer Cross-Site Request Forgery (2.35.1.2.3)
Python Integer Overflow or Wraparound Vulnerability (CVE-2016-5636)