What’s Vulnerable › Products
dasinfomedia WPGYM - Wordpress Gym Management System vulnerabilities
6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.
Check whether your dasinfomedia WPGYM - Wordpress Gym Management System version is affected
Latest dasinfomedia WPGYM - Wordpress Gym Management System vulnerabilities
- CVE-2025-7049 — WPGYM - Wordpress Gym Management System <= 67.7.0 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover (CVSS 8.8)
- CVE-2025-6080 — WPGYM <= 67.7.0 - Missing Authorization to Admin Account Creation (CVSS 8.8)
- CVE-2025-3671 — WPGYM - Wordpress Gym Management System <= 67.7.0 - Authenticated (Subscriber+) Local File Inclusion to Privilege Escalation via Password Update (CVSS 8.8)
- CVE-2025-7442 — WPGYM - Wordpress Gym Management System < 67.8.0 - Unauthenticated SQL Injection (CVSS 7.5)
- CVE-2024-9942 — WPGYM <= 67.1.0 - Unauthenticated Arbitrary File Upload (CVSS 9.8)
- CVE-2024-9941 — WPGYM <= 67.1.0 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation (CVSS 8.8)