Hospital Management System for Wordpress

Information

Software Type	Plugin
Software Slug	hospital-management
Software Status	Active
Software Author	dasinfomedia
Software Website	codecanyon.net
Software Active Installs	918
Software Record Last Updated	April 30, 2025

7 Vulnerabilities

Submit a Vulnerability

Hospital Management System <= 47.0(20-11-2023) - Authenticated (Subscriber+) Privilege Escalation

8.8

CVE-2025-47631

May 22, 2025

Researcher: Cút lộn xào me

Hospital Management System <= 47.0(20-11-2023) - Authenticated (Subscriber+) Arbitrary File Upload

8.8

CVE-2025-47663

May 20, 2025

Researcher: Cút lộn xào me

Hospital Management System <= 47.0(20-11-2023) - Unauthenticated Arbitrary File Upload

9.8

CVE-2025-39380

Apr 22, 2025

Researcher: Thái An

Hospital Management System <= 47.0(20-11-2023) - Unauthenticated SQL Injection

7.5

CVE-2025-39386

Apr 22, 2025

Researcher: Trương Hữu Phúc (truonghuuphuc)

Hospital Management System <= 47.0(20-11-2023) - Reflected Cross-Site Scripting

6.1

CVE-2025-39393

Apr 22, 2025

Researcher: Thái An

Hospital Management System <= 47.0(20-11-2023) - Authenticated (Subscriber+) SQL Injection

6.5

CVE-2025-39357

Apr 21, 2025

Researcher: Thái An

Mojoomla Hospital Management System for WordPress Theme < 22-05-2018 - SQL Injection

8.8

CVE-2017-14846

Sep 26, 2017

Researcher: Ihsan Sencan

Title	Status	CVE ID	CVSS	Researchers	Date
Hospital Management System <= 47.0(20-11-2023) - Authenticated (Subscriber+) Privilege Escalation	Unpatched	CVE-2025-47631	8.8	Cút lộn xào me	May 22, 2025
Hospital Management System <= 47.0(20-11-2023) - Authenticated (Subscriber+) Arbitrary File Upload	Unpatched	CVE-2025-47663	8.8	Cút lộn xào me	May 20, 2025
Hospital Management System <= 47.0(20-11-2023) - Unauthenticated Arbitrary File Upload	Unpatched	CVE-2025-39380	9.8	Thái An	April 22, 2025
Hospital Management System <= 47.0(20-11-2023) - Unauthenticated SQL Injection	Unpatched	CVE-2025-39386	7.5	Trương Hữu Phúc (truonghuuphuc)	April 22, 2025
Hospital Management System <= 47.0(20-11-2023) - Reflected Cross-Site Scripting	Unpatched	CVE-2025-39393	6.1	Thái An	April 22, 2025
Hospital Management System <= 47.0(20-11-2023) - Authenticated (Subscriber+) SQL Injection	Unpatched	CVE-2025-39357	6.5	Thái An	April 21, 2025
Mojoomla Hospital Management System for WordPress Theme < 22-05-2018 - SQL Injection	Patched	CVE-2017-14846	8.8	Ihsan Sencan	September 26, 2017

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation