WPGYM - Wordpress Gym Management System

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   WPGYM - Wordpress Gym Management System

Information

Software Type Plugin
Software Slug gym-management
Software Status Active
Software Author dasinfomedia
Software Website codecanyon.net
Software Record Last Updated October 29, 2024

10 Vulnerabilities

Submit a Vulnerability
WPGYM - Wordpress Gym Management System <= 67.7.0 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover
8.8
CVE-2025-7049
Sep 9, 2025
Researcher: Michelle Porter
WPGYM - Wordpress Gym Management System <= 67.7.0 - Authenticated (Subscriber+) Local File Inclusion to Privilege Escalation via Password Update
8.8
CVE-2025-3671
Aug 15, 2025
Researchers: Trương Hữu Phúc (truonghuuphuc), Thái An
WPGYM <= 67.7.0 - Missing Authorization to Admin Account Creation
8.8
CVE-2025-6080
Aug 15, 2025
Researcher: Foxyyy
WPGYM - Wordpress Gym Management System < 67.8.0 - Unauthenticated SQL Injection
7.5
CVE-2025-7442
Jul 10, 2025
Researcher: Trương Hữu Phúc (truonghuuphuc)
WPGYM <= 65.0 - Authenticated (Subscriber+) SQL Injection
6.5
CVE-2025-32574
Jul 8, 2025
Researcher: Frank
WPGYM <= 65.0 - Authenticated (Subscriber+) Local File Inclusion
8.8
CVE-2025-32549
Jun 12, 2025
Researcher: Annn
WPGYM < 67.8.0 - Unauthenticated SQL Injection
7.5
CVE-2025-32643
May 16, 2025
Researcher: Bonds
WPGYM <= 67.1.0 - Unauthenticated Arbitrary File Upload
9.8
CVE-2024-9942
Nov 22, 2024
Researcher: Tonn
WPGYM <= 67.1.0 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
8.8
CVE-2024-9941
Nov 22, 2024
Researcher: Tonn
WPGYM - Wordpress Gym Management System (Unknown Version) - SQL Injection
8.8
CVE-2017-14844
Sep 26, 2017
Researcher: Ihsan Sencan
Title Status CVE ID CVSS Researchers Date
WPGYM - Wordpress Gym Management System <= 67.7.0 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover Unpatched CVE-2025-7049 8.8 Michelle Porter September 9, 2025
WPGYM - Wordpress Gym Management System <= 67.7.0 - Authenticated (Subscriber+) Local File Inclusion to Privilege Escalation via Password Update Unpatched CVE-2025-3671 8.8 Trương Hữu Phúc (truonghuuphuc), Thái An August 15, 2025
WPGYM <= 67.7.0 - Missing Authorization to Admin Account Creation Unpatched CVE-2025-6080 8.8 Foxyyy August 15, 2025
WPGYM - Wordpress Gym Management System < 67.8.0 - Unauthenticated SQL Injection Patched CVE-2025-7442 7.5 Trương Hữu Phúc (truonghuuphuc) July 10, 2025
WPGYM <= 65.0 - Authenticated (Subscriber+) SQL Injection Unpatched CVE-2025-32574 6.5 Frank July 8, 2025
WPGYM <= 65.0 - Authenticated (Subscriber+) Local File Inclusion Unpatched CVE-2025-32549 8.8 Annn June 12, 2025
WPGYM < 67.8.0 - Unauthenticated SQL Injection Patched CVE-2025-32643 7.5 Bonds May 16, 2025
WPGYM <= 67.1.0 - Unauthenticated Arbitrary File Upload Patched CVE-2024-9942 9.8 Tonn November 22, 2024
WPGYM <= 67.1.0 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation Patched CVE-2024-9941 8.8 Tonn November 22, 2024
WPGYM - Wordpress Gym Management System (Unknown Version) - SQL Injection Unpatched CVE-2017-14844 8.8 Ihsan Sencan September 26, 2017

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation