WP Manifestindependent plugin directory
manifest / content / school-management-plugin

School Management WP Registry grade B. Medium-severity findings · 1 findingWP RegistryMedium-severity findings · 1 findingOpen the reportB

Plugin for school management

★ 0stars
13release downloads
v0.6.5latest · 7mo ago

Install

Download school-management.zip From the v0.6.5 release on GitHub, Mar 3, 2026

Upload it under Plugins → Add New Plugin → Upload Plugin, then activate.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/ctadz/school-management-plugin/releases/download/v0.6.5/school-management.zip
Updates itself. It ships its own updater, so new versions appear under Dashboard → Updates.

Status: 🚧 Active Development | Latest: v0.6.0 - Simplified Architecture

This plugin is under active development for Cyber Tech Academy. While the code is open source (GPL-2.0+), this is currently a work in progress.

  • ⚠️ Not yet ready for production use by third parties
  • 🚧 Breaking changes may occur during development phase (0.x.x versions)
  • 📧 Official support only available for licensed installations
  • 🌍 Available in English, French (Français), and soon Arabic (العربية)

Interested in using this for your school? Contact us: info@ctadz.org


🎉 What's New in v0.6.0

Based on user feedback, we've completely restructured the plugin for simplicity:

  • 3-Category Menu Architecture: Separated Academic, Financial, and Settings into distinct menus
  • Simplified Workflows: Optional enrollment during student registration
  • School Accountant Role: New role with financial-only access
  • Industry Standard Design: Follows patterns from OpenSIS, PowerSchool, and Skyward

See CHANGELOG.md for complete details.


🌐 Language Support

This plugin is fully internationalized and currently supports:

  • 🇬🇧 English - Default language
  • 🇫🇷 Français - Complete translation (100%)
  • 🇸🇦 العربية (Arabic) - Coming soon

All UI elements, admin pages, and user-facing messages are translatable.


🇫🇷 Version Française

📖 Description

Un plugin WordPress complet pour gérer les étudiants, les cours, les emplois du temps, les présences et les paiements dans les écoles privées et centres de formation.

Développé pour Cyber Tech Academy, ce plugin offre une solution tout-en-un pour la gestion scolaire avec prise en charge multilingue.

✨ Fonctionnalités Principales

📚 Gestion Académique

  • Étudiants : Inscriptions, profils détaillés, codes étudiants uniques, photos
  • Enseignants : Profils, taux horaires, modalités de paiement
  • Cours : Gestion complète (français & anglais, tous niveaux)
  • Niveaux : Système flexible de niveaux académiques
  • Salles de classe : Attribution et gestion des espaces

💰 Gestion Financière

  • Inscriptions & Paiements : Suivi automatisé des frais de scolarité
  • Échéanciers de paiement : Plans mensuels, trimestriels, personnalisés
  • Remises familiales : Calcul automatique pour les familles avec plusieurs étudiants
  • Alertes de paiement : Notifications pour les paiements en retard
  • Rapports financiers : États détaillés et exports

📅 Emploi du Temps & Présences

  • Calendrier hebdomadaire : Vue d'ensemble des cours et enseignants
  • Suivi des présences : Interface colorée et intuitive
  • Événements scolaires : Gestion du calendrier académique

🔐 Rôles & Permissions

  • Administrateur : Accès complet au système
  • Administrateur École : Gestion académique et financière complète
  • Comptable École (NOUVEAU v0.6.0) : Accès financier uniquement
  • Enseignants : Accès limité aux informations pertinentes
  • Étudiants : Portail dédié (via extension Student Portal)

🎨 Interface Utilisateur

  • Design moderne et responsive
  • Interface CRUD basée sur shortcode
  • Tableaux de bord interactifs
  • Mode sombre (à venir)

🔌 Extensions Disponibles

Le système principal peut être étendu avec :

🚀 Installation

  1. Télécharger le plugin :

    cd wp-content/plugins
    git clone https://github.com/ctadz/school-management-plugin.git school-management
  2. Activer le plugin :

    • Aller dans WordPress Admin → Extensions
    • Activer School Management
  3. Configuration :

    • Le plugin crée automatiquement les tables de base de données
    • Accéder au menu Gestion Scolaire dans l'admin WordPress
    • Configurer les niveaux, salles de classe et modalités de paiement

🔄 Mises à Jour Automatiques

Le plugin supporte les mises à jour automatiques via GitHub Releases. WordPress vérifie les nouvelles versions toutes les 12 heures et affiche les notifications de mise à jour.

🛠️ Développement

main    → Branche stable (production)
develop → Développement actif
feature/ → Nouvelles fonctionnalités

Contribuer :

  • Ce projet utilise Semantic Versioning
  • Les Pull Requests sont les bienvenues
  • Merci de tester vos modifications avant de soumettre

📄 Licence

GPL-2.0+ - Ce plugin est un logiciel libre, vous pouvez le redistribuer et/ou le modifier selon les termes de la Licence Publique Générale GNU.


🇬🇧 English Version

📖 Description

A comprehensive WordPress plugin for managing students, courses, schedules, attendance, and payments in private schools and training centers.

Built for Cyber Tech Academy, this plugin provides an all-in-one solution for school management with multilingual support.

✨ Key Features

📚 Academic Management

  • Students: Registration, detailed profiles, unique student codes, photos
  • Teachers: Profiles, hourly rates, payment terms
  • Courses: Complete management (French & English, all levels)
  • Levels: Flexible academic level system
  • Classrooms: Space allocation and management

💰 Financial Management

  • Enrollments & Payments: Automated tuition fee tracking
  • Payment Schedules: Monthly, quarterly, and custom plans
  • Family Discounts: Automatic calculation for families with multiple students
  • Payment Alerts: Notifications for overdue payments
  • Financial Reports: Detailed statements and exports

📅 Scheduling & Attendance

  • Weekly Calendar: Overview of courses and teachers
  • Attendance Tracking: Color-coded intuitive interface
  • School Events: Academic calendar management

🔐 Roles & Permissions

  • Administrator: Complete system access
  • School Admin: Full academic and financial management
  • School Accountant (NEW in v0.6.0): Financial access only
  • Teachers: Limited access to relevant information
  • Students: Dedicated portal (via Student Portal add-on)

🎨 User Interface

  • Modern and responsive design
  • Shortcode-based CRUD interface
  • Interactive dashboards
  • Dark mode (coming soon)

🔌 Available Add-ons

The core system can be extended with:

🚀 Installation

  1. Download the plugin:

    cd wp-content/plugins
    git clone https://github.com/ctadz/school-management-plugin.git school-management
  2. Activate the plugin:

    • Go to WordPress Admin → Plugins
    • Activate School Management
  3. Configuration:

    • The plugin automatically creates database tables
    • Access the School Management menu in WordPress admin
    • Configure levels, classrooms, and payment terms

🔄 Automatic Updates

The plugin supports automatic updates via GitHub Releases. WordPress checks for new versions every 12 hours and displays update notifications.

🛠️ Development Workflow

main    → Stable, production-ready branch
develop → Active development branch
feature/ → New feature branches

Contributing:

  • This project uses Semantic Versioning
  • Pull Requests are welcome
  • Please test your changes before submitting

📄 License

GPL-2.0+ - This plugin is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License.


📊 Versioning

We use Semantic Versioning for release management:

  • 0.x.x = Development phase (current)
  • 1.0.0 = First stable production release
  • 1.x.x = Feature releases
  • x.x.1 = Bug fixes and patches

Current Version: 0.6.0

Latest Updates (v0.6.0 - Jan 13, 2026):

  • ✅ 3-category menu architecture (Academic, Financial, Settings)
  • ✅ Simplified student registration workflow
  • ✅ New School Accountant role with financial-only access
  • ✅ Dedicated Financial Dashboard with charts
  • ✅ Industry-standard architecture (OpenSIS/PowerSchool pattern)
  • ✅ Complete documentation (User Guide, Roles, Workflows)

Previous Updates:

  • ✅ French translations for payment alerts and family discounts
  • ✅ Automatic update system via GitHub
  • ✅ Family discount calculator with bulk recalculation tools
  • ✅ Deactivation dependency protection for add-ons
  • ✅ Responsive design improvements
  • 🔜 Arabic translation (coming soon)

See CHANGELOG.md for full version history.


📚 Documentation

Comprehensive documentation is available in the /docs folder:

  • User Guide - Complete guide to using the plugin

    • Menu structure overview
    • Academic management
    • Financial management
    • Common workflows
    • FAQ
  • Roles Guide - Role-based access control

    • Role comparison chart
    • Detailed capabilities
    • User management
    • Security best practices
  • Workflows Guide - Step-by-step workflows

    • Student registration
    • Enrollment processes
    • Payment collection
    • Attendance marking
    • Administrative tasks

🤝 Support & Contact


🙏 Credits

Developed by: CTADZ (Cyber Tech Academy) Author: Ahmed Sebaa License: GPL-2.0+ Repository: github.com/ctadz/school-management-plugin


📸 Screenshots

School Management Dashboard Coming soon: Dashboard overview


⚠️ Requirements

  • WordPress: 5.8 or higher
  • PHP: 7.4 or higher
  • MySQL: 5.6 or higher
  • Recommended: PHP 8.0+, WordPress 6.4+

🔒 Security

If you discover a security vulnerability, please email info@ctadz.org instead of using the issue tracker.


Made with ❤️ for educational institutions by Cyber Tech Academy

Releases

12 releases. Each count is every asset in that release; expand a row for the breakdown.

Tag
Published
Assets
Downloads
v0.6.5 latest
Mar 3, 2026 7mo ago
school-management.zip
5
Feb 27, 2026 7mo ago
school-management.zip
1
Feb 2, 2026 8mo ago
school-management.zip
1
Jan 28, 2026 8mo ago
school-management.zip
2
Jan 27, 2026 8mo ago
school-management.zip
0
Jan 27, 2026 8mo ago
school-management.zip
1
Dec 27, 2025 9mo ago
school-management.zip
2
Dec 27, 2025 9mo ago
school-management.zip
1
Dec 27, 2025 9mo ago
school-management.zip
0
Dec 27, 2025 9mo ago
school-management.zip
0
Dec 27, 2025 9mo ago
school-management.zip
0
Dec 21, 2025 10mo ago
tag only
—
B grade

Security

School Management 0.6.5 · audited by WP Registry

Medium-severity findings.

1 medium
Audited release
0.6.5
Findings
1
Worst severity
medium
Content hash
a139ba15b5a3b1b0a5ae9494…

Findings

  • medium Client-controlled is_admin bypasses teacher scoping on attendance class list

    auth_bypass

    ajax_get_classes_for_date verifies sm_attendance_nonce then reads is_admin from $_POST. If is_admin==1, the teacher_id WHERE clause is omitted, returning all schedules. No current_user_can('manage_attendance') check. A teacher who can load the attendance UI nonce can escalate to view all classes/students lists.

    includes/class-sm-attendance-page.php:755-790

    Recommendation

    Ignore client is_admin; set $is_admin = current_user_can('manage_attendance') server-side.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.