Dasinfomedia vulnerabilities

Products

• School Management System For Wordpress 10
• School Management System 8
• Wpgym - Wordpress Gym Management System 6
• Wpgym Gym Management System 3
• Wpchurch 2

Newest

• dasinfomedia wpchurch WordPress WPCHURCH plugin <= 2.7.0 - Privilege Escalation Vulnerability CVE-2025-31643 8.8 HighJanuary 7, 2026
• dasinfomedia wpchurch WordPress WPCHURCH plugin <= 2.7.0 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-31642 7.1 HighJanuary 6, 2026
• dasinfomedia wpgym - wordpress gym management system WPGYM - Wordpress Gym Management System <= 67.7.0 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover CVE-2025-7049 8.8 HighSeptember 10, 2025
• dasinfomedia school management system for wordpress School Management System <= 93.2.0 - Authenticated (Student+) Arbitrary File Upload CVE-2025-6079 8.8 HighAugust 16, 2025
• dasinfomedia wpgym - wordpress gym management system WPGYM <= 67.7.0 - Missing Authorization to Admin Account Creation CVE-2025-6080 8.8 HighAugust 16, 2025
• dasinfomedia wpgym - wordpress gym management system WPGYM - Wordpress Gym Management System <= 67.7.0 - Authenticated (Subscriber+) Local File Inclusion to Privilege Escalation via Password Update CVE-2025-3671 8.8 HighAugust 16, 2025
• dasinfomedia school management system for wordpress School Management System for Wordpress <= 93.2.0 - Unauthenticated SQL Injection CVE-2024-12612 7.5 HighAugust 16, 2025
• dasinfomedia school management system for wordpress School Management System for Wordpress <= 93.1.0 - Authenticated (Subscriber+) Local File Inclusion to Privilege Escalation via Password Update CVE-2025-3740 8.8 HighJuly 18, 2025
• dasinfomedia wpgym - wordpress gym management system WPGYM - Wordpress Gym Management System < 67.8.0 - Unauthenticated SQL Injection CVE-2025-7442 7.5 HighJuly 11, 2025
• dasinfomedia school management system for wordpress, school management system +1 more School Management System for Wordpress <= 93.0.0 - Authenticated (Student+) Account Takeover and Privilege Escalation CVE-2024-9658 8.8 HighMarch 7, 2025
• dasinfomedia school management system for wordpress, school management system +1 more School Management System for Wordpress <= 93.0.0 - Missing Authorization to Unauthenticated Arbitrary Post Deletion CVE-2024-12610 5.3 MediumMarch 7, 2025
• dasinfomedia school management system for wordpress, school management system +1 more School Management System for Wordpress <= 92.0.0 - Authenticated (Student+) SQL Injection via 'view-attendance' CVE-2024-12609 6.5 MediumMarch 7, 2025
• dasinfomedia school management system for wordpress, school management system +1 more School Management System for Wordpress <= 93.0.0 - Reflected Cross-Site Scripting CVE-2024-12611 5.3 MediumMarch 7, 2025
• dasinfomedia school management system for wordpress, school management system +1 more School Management System for Wordpress <= 92.0.0 - Authenticated (Subscriber+) SQL Injection via 'mj_smgt_show_event_task' CVE-2024-12607 6.5 MediumMarch 7, 2025
• dasinfomedia wpgym - wordpress gym management system, mojoomla wordpress gym management system, dasinfomedia wpgym gym management system +2 more WPGYM <= 67.1.0 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation CVE-2024-9941 8.8 HighNovember 23, 2024
• dasinfomedia school management system for wordpress, school management system +1 more School Management <= 91.5.0 - Unauthenticated Arbitrary File Upload CVE-2024-9659 9.8 CriticalNovember 23, 2024
• dasinfomedia wpgym - wordpress gym management system, mojoomla wordpress gym management system, dasinfomedia wpgym gym management system +2 more WPGYM <= 67.1.0 - Unauthenticated Arbitrary File Upload CVE-2024-9942 9.8 CriticalNovember 23, 2024
• dasinfomedia school management system for wordpress, school management system +1 more School Management <= 91.5.0 - Authenticated (Student+) Arbitrary File Upload CVE-2024-9660 8.8 HighNovember 23, 2024
• dasinfomedia wphrm human resource management system WPHRM Human Resource Management System for WordPress 1.0 allows SQL Injection via the employee_id... CVE-2017-14848 Public exploit 8.8 HighOctober 2, 2017
• dasinfomedia wpams apartment management system Mojoomla WPAMS Apartment Management System for WordPress allows SQL Injection via the id parameter. CVE-2017-14847 Public exploit 8.8 HighSeptember 27, 2017
• dasinfomedia hospital management system Mojoomla Hospital Management System for WordPress allows SQL Injection via the id parameter. CVE-2017-14846 Public exploit 8.8 HighSeptember 27, 2017
• dasinfomedia wpchurch church management system Mojoomla WPCHURCH Church Management System for WordPress allows SQL Injection via the id parameter. CVE-2017-14845 Public exploit 8.8 HighSeptember 27, 2017
• dasinfomedia wpgym gym management system Mojoomla WPGYM WordPress Gym Management System allows SQL Injection via the id parameter. CVE-2017-14844 Public exploit 8.8 HighSeptember 27, 2017
• dasinfomedia school management system Mojoomla School Management System for WordPress allows SQL Injection via the id parameter. CVE-2017-14843 Public exploit 8.8 HighSeptember 27, 2017
• dasinfomedia smsmaster multipurpose sms gateway Mojoomla SMSmaster Multipurpose SMS Gateway for WordPress allows SQL Injection via the id parameter. CVE-2017-14842 Public exploit 8.8 HighSeptember 27, 2017
• dasinfomedia annual maintenance contract management system Mojoomla Annual Maintenance Contract (AMC) Management System allows Arbitrary File Upload in... CVE-2017-14841 Public exploit 6.5 MediumSeptember 27, 2017