Exploit for Weblizar School Management Pro plugin backdoor CVE-2022-1609

## https://sploitus.com/exploit?id=SAINT:69B4DD72AE65C3BC03A4C5A02E639CE9
Added: 08/12/2022  
CVE: [CVE-2022-1609](<https://vulners.com/cve/CVE-2022-1609>)  


### Background

[Weblizar School Management](<https://weblizar.com/plugins/school-management/>) is a WordPress plugin for management of school operations. 

### Problem

The license checking code in School Management Pro contains a backdoor which allows remote attackers to execute arbitrary commands. 

### Resolution

Upgrade to the current version of School Management Pro. 

### References

<https://jetpack.com/blog/backdoor-found-in-the-school-management-pro-plugin-for-wordpress/>