Plugin icon

Gym Management

gym-management

Vulnerabilities:

9

Last Updated:

April 4, 2026

Active Installs:

n/a

Published
Title
Fixed in
CVSS
Published
2025-09-09
Title
WPGYM - Wordpress Gym Management System <= 67.7.0 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover
Fixed in
No known fix
CVSS
8.8 (high)
Published
2025-08-15
Title
WPGYM - Wordpress Gym Management System <= 67.7.0 - Authenticated (Subscriber+) Local File Inclusion to Privilege Escalation via Password Update
Fixed in
No known fix
CVSS
8.8 (high)
Published
2025-08-15
Title
WPGYM <= 67.7.0 - Missing Authorization to Admin Account Creation
Fixed in
No known fix
CVSS
8.8 (high)
Published
2025-07-10
Title
WPGYM - Wordpress Gym Management System < 67.8.0 - Unauthenticated SQL Injection
Fixed in
Fixed in 67.8.0
CVSS
7.5 (high)
Published
2025-07-08
Title
WPGYM <= 65.0 - Authenticated (Subscriber+) SQL Injection
Fixed in
No known fix
CVSS
6.5 (medium)
Published
2025-06-12
Title
WPGYM <= 65.0 - Authenticated (Subscriber+) Local File Inclusion
Fixed in
No known fix
CVSS
8.8 (high)
Published
2025-05-16
Title
WPGYM < 67.8.0 - Unauthenticated SQL Injection
Fixed in
Fixed in 67.8.0
CVSS
7.5 (high)
Published
2024-11-22
Title
WPGYM < 67.2.0 - Unauthenticated Arbitrary File Upload
Fixed in
Fixed in 67.2.0
CVSS
9.8 (critical)
Published
2024-11-22
Title
WPGYM < 67.2.0 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
Fixed in
Fixed in 67.2.0
CVSS
8.8 (high)