CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 67.7.0 via the 'MJ_gmgt_gmgt_add_user' function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change the email, password, and other details of any user, including Administrator users.
Explanation of Vulnerability in Simple Terms
WPGYM, a WordPress gym management plugin, contains an authorization flaw affecting versions up to 67.7.0. An authenticated user with low privileges can read, modify, or delete sensitive data and functionality across the plugin. The vulnerability requires a valid WordPress account but no additional user interaction. Site administrators should update immediately to a version newer than 67.7.0.
What an attacker can do
Read, modify, or delete sensitive gym management data and settings with a low-privilege WordPress account.
Potential impact on your site
Any registered user can access and alter gym member data, schedules, payments, and plugin configuration.
Conditions required to exploit
Attacker must have a valid WordPress user account with low privileges; no user interaction required.
Key dates
External resources
Related vulnerabilities
