WPGYM - Wordpress Gym Management System <= 67.7.0 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover
high
The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 67.7.0 via the 'MJ_gmgt_gmgt_add_user' function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level acces...
- CVSS:
- 8.8
- Affected:
- up to 67.7.0
- Fix:
- No patched version reported
- Disclosed:
- Sep 9, 2025
CVE-2025-7049 on NVD →
WPGYM - Wordpress Gym Management System <= 67.7.0 - Authenticated (Subscriber+) Local File Inclusion to Privilege Escalation via Password Update
high
The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 67.7.0 via the 'page' parameter. This makes it possible for authenticated attackers, with Subscriber-level access and above, to include and execute arbitrary files on the server,...
- CVSS:
- 8.8
- Affected:
- up to 67.7.0
- Fix:
- No patched version reported
- Disclosed:
- Aug 15, 2025
CVE-2025-3671 on NVD →
WPGYM <= 67.7.0 - Missing Authorization to Admin Account Creation
high
The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to unauthorized admin account creation in all versions up to, and including, 67.7.0. This is due to the plugin not properly validating a user's capabilities prior to adding users. This makes it possible for authenticated attackers, with Subs...
- CVSS:
- 8.8
- Affected:
- up to 67.7.0
- Fix:
- No patched version reported
- Disclosed:
- Aug 15, 2025
CVE-2025-6080 on NVD →
WPGYM [gym-management] <= 65.0 (unfixed)
unknown
[en] Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mojoomla WPGYM allows SQL Injection. This issue affects WPGYM: from n/a through 65.0.
- Affected:
- up to 65.0
- Fix:
- No patched version reported
- Disclosed:
- Jul 16, 2025
CVE-2025-32574 on NVD →
WPGYM - Wordpress Gym Management System < 67.8.0 - Unauthenticated SQL Injection
high
The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to SQL Injection via several parameters in the MJ_gmgt_delete_class_limit_for_member, MJ_gmgt_get_yearly_income_expense, MJ_gmgt_get_monthly_income_expense, MJ_gmgt_add_class_limit, MJ_gmgt_view_meeting_detail, and MJ_gmgt_create_meeting fun...
- CVSS:
- 7.5
- Affected:
- up to 67.8.0
- Fixed in:
- 67.8.0
- Disclosed:
- Jul 10, 2025
CVE-2025-7442 on NVD →
WPGYM <= 65.0 - Authenticated (Subscriber+) SQL Injection
medium
The WPGYM plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 65.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with subscriber-level access and above, to a...
- CVSS:
- 6.5
- Affected:
- up to 65.0
- Fix:
- No patched version reported
- Disclosed:
- Jul 8, 2025
CVE-2025-32574 on NVD →
WPGYM [gym-management] <= 65.0 (unfixed)
unknown
[en] Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in mojoomla WPGYM allows PHP Local File Inclusion. This issue affects WPGYM: from n/a through 65.0.
- Affected:
- up to 65.0
- Fix:
- No patched version reported
- Disclosed:
- Jun 17, 2025
CVE-2025-32549 on NVD →
WPGYM <= 65.0 - Authenticated (Subscriber+) Local File Inclusion
high
The WPGYM plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 65.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can b...
- CVSS:
- 8.8
- Affected:
- up to 65.0
- Fix:
- No patched version reported
- Disclosed:
- Jun 12, 2025
CVE-2025-32549 on NVD →
WPGYM < 67.8.0 - Unauthenticated SQL Injection
high
The WPGYM plugin for WordPress is vulnerable to SQL Injection in versions up to, and excluding, 67.8.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into alr...
- CVSS:
- 7.5
- Affected:
- up to 67.8.0
- Fixed in:
- 67.8.0
- Disclosed:
- May 16, 2025
CVE-2025-32643 on NVD →
WPGYM [gym-management] <= 65.0 (unfixed)
unknown
[en] Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mojoomla WPGYM allows Blind SQL Injection. This issue affects WPGYM: from n/a through 65.0.
- Affected:
- up to 65.0
- Fix:
- No patched version reported
- Disclosed:
- May 16, 2025
CVE-2025-32643 on NVD →
WPGYM [gym-management] < 67.2.0
unknown
[en] The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the MJ_gmgt_user_avatar_image_upload() function in all versions up to, and including, 67.1.0. This makes it possible for unauthenticated attackers to upload arbitrary file...
- Affected:
- up to 67.2.0
- Fixed in:
- 67.2.0
- Disclosed:
- Nov 23, 2024
CVE-2024-9942 on NVD →
WPGYM [gym-management] < 67.2.0
unknown
[en] The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the MJ_gmgt_add_staff_member() function in all versions up to, and including, 67.1.0. This makes it possible for authenticated attackers, with subscriber-level access and abov...
- Affected:
- up to 67.2.0
- Fixed in:
- 67.2.0
- Disclosed:
- Nov 23, 2024
CVE-2024-9941 on NVD →
WPGYM <= 67.1.0 - Unauthenticated Arbitrary File Upload
critical
The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the MJ_gmgt_user_avatar_image_upload() function in all versions up to, and including, 67.1.0. This makes it possible for unauthenticated attackers to upload arbitrary files on...
- CVSS:
- 9.8
- Affected:
- up to 67.1.0
- Fixed in:
- 67.2.0
- Disclosed:
- Nov 22, 2024
CVE-2024-9942 on NVD →
WPGYM <= 67.1.0 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
high
The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the MJ_gmgt_add_staff_member() function in all versions up to, and including, 67.1.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to...
- CVSS:
- 8.8
- Affected:
- up to 67.1.0
- Fixed in:
- 67.2.0
- Disclosed:
- Nov 22, 2024
CVE-2024-9941 on NVD →
WPGYM [gym-management] <= 100
unknown
[en] Mojoomla WPGYM WordPress Gym Management System allows SQL Injection via the id parameter.
- Affected:
- up to 100
- Fixed in:
- 100
- Disclosed:
- Sep 27, 2017
CVE-2017-14844 on NVD →
WPGYM - Wordpress Gym Management System (Unknown Version) - SQL Injection
high
Mojoomla WPGYM WordPress Gym Management System allows SQL Injection via the id parameter.
- CVSS:
- 8.8
- Affected:
- up to *
- Fix:
- No patched version reported
- Disclosed:
- Sep 26, 2017
CVE-2017-14844 on NVD →
WPGYM [gym-management] < 67.8.0
unknown
- Affected:
- up to 67.8.0
- Fixed in:
- 67.8.0
CVE-2025-7442 on NVD →
WPGYM [gym-management] <= 67.7.0 (unfixed)
unknown
- Affected:
- up to 67.7.0
- Fix:
- No patched version reported
CVE-2025-3671 on NVD →
WPGYM [gym-management] <= 67.7.0 (unfixed)
unknown
- Affected:
- up to 67.7.0
- Fix:
- No patched version reported
CVE-2025-6080 on NVD →
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database