Log in Start free

Dasinfomedia

Products

ProductCVEsExploitedLatest
School Management System for Wordpress10–Aug 16, 2025
WPGYM - Wordpress Gym Management System6–Sep 10, 2025
WPCHURCH2–Jan 7, 2026

Exploited and recent CVEs

  • CVE-2025-31643 High 8.8 WordPress WPCHURCH plugin <= 2.7.0 - Privilege Escalation Vulnerability 0.3%
  • CVE-2025-31642 High 7.1 WordPress WPCHURCH plugin <= 2.7.0 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-7049 High 8.8 WPGYM - Wordpress Gym Management System <= 67.7.0 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover 0.3%
  • CVE-2025-6079 High 8.8 School Management System <= 93.2.0 - Authenticated (Student+) Arbitrary File Upload 0.6%
  • CVE-2025-6080 High 8.8 WPGYM <= 67.7.0 - Missing Authorization to Admin Account Creation 0.3%
  • CVE-2025-3671 High 8.8 WPGYM - Wordpress Gym Management System <= 67.7.0 - Authenticated (Subscriber+) Local File Inclusion to Privilege Escalation via Password Update 0.8%
  • CVE-2024-12612 High 7.5 School Management System for Wordpress <= 93.2.0 - Unauthenticated SQL Injection 0.5%
  • CVE-2025-3740 High 8.8 School Management System for Wordpress <= 93.1.0 - Authenticated (Subscriber+) Local File Inclusion to Privilege Escalation via Password Update 0.8%
  • CVE-2025-7442 High 7.5 WPGYM - Wordpress Gym Management System < 67.8.0 - Unauthenticated SQL Injection 0.4%
  • CVE-2024-9658 High 8.8 School Management System for Wordpress <= 93.0.0 - Authenticated (Student+) Account Takeover and Privilege Escalation 0.4%
  • CVE-2024-12609 Medium 6.5 School Management System for Wordpress <= 92.0.0 - Authenticated (Student+) SQL Injection via 'view-attendance' 0.4%
  • CVE-2024-12610 Medium 5.3 School Management System for Wordpress <= 93.0.0 - Missing Authorization to Unauthenticated Arbitrary Post Deletion 0.3%
  • CVE-2024-12611 Medium 5.3 School Management System for Wordpress <= 93.0.0 - Reflected Cross-Site Scripting 0.3%
  • CVE-2024-12607 Medium 6.5 School Management System for Wordpress <= 92.0.0 - Authenticated (Subscriber+) SQL Injection via 'mj_smgt_show_event_task' 0.3%
  • CVE-2024-9659 Critical 9.8 School Management <= 91.5.0 - Unauthenticated Arbitrary File Upload 1.7%
  • CVE-2024-9941 High 8.8 WPGYM <= 67.1.0 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation 0.6%
  • CVE-2024-9942 Critical 9.8 WPGYM <= 67.1.0 - Unauthenticated Arbitrary File Upload 1.2%
  • CVE-2024-9660 High 8.8 School Management <= 91.5.0 - Authenticated (Student+) Arbitrary File Upload 1.1%