Dasinfomedia

26 CVEs across 11 Dasinfomedia products. Browse Dasinfomedia vulnerabilities, severities, and proof-of-concept exploits.

Dasinfomedia products with known CVEs

ProductCVEs
School Management System For Wordpress10
School Management System8
Wpgym - Wordpress Gym Management System6
Wpchurch2
Annual Maintenance Contract Management System1
Hospital Management System1
Smsmaster Multipurpose Sms Gateway1
Wpams Apartment Management System1
Wpchurch Church Management System1
Wpgym Gym Management System1
Wphrm Human Resource Management System1
Dasinfomedia CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-31643High8.82026-01-07Incorrect Privilege Assignment vulnerability in Dasinfomedia WPCHURCH allows Privilege Escalation.This issue affects WPCHURCH: from n/a through 2.7.0.
CVE-2025-31642High7.12026-01-07Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dasinfomedia WPCHURCH allows Reflected XSS.This issue aff…
CVE-2025-7049High8.82025-09-10The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 67.7.0 via the 'MJ…
CVE-2025-6080High8.82025-08-16The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to unauthorized admin account creation in all versions up to, and including, 67…
CVE-2025-6079High8.82025-08-16The School Management System for Wordpress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the homework.php…
CVE-2025-3671High8.82025-08-16The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 67.7.0 via the 'pa…
CVE-2024-12612High7.52025-08-16The School Management System for Wordpress plugin for WordPress is vulnerable to SQL Injection via several parameters across multiple AJAX action in all versio…
CVE-2025-3740High8.82025-07-18The School Management System for Wordpress plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 93.1.0 via the 'pag…
CVE-2025-7442High7.52025-07-11The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to SQL Injection via several parameters in the MJ_gmgt_delete_class_limit_for_me…
CVE-2024-9658High8.82025-03-07The School Management System for Wordpress plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including…
CVE-2024-12611Medium5.32025-03-07The School Management System for Wordpress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'title' parameter in all versions up to…
CVE-2024-12610Medium5.32025-03-07The School Management System for Wordpress plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'mj_smgt_re…
CVE-2024-12609Medium6.52025-03-07The School Management System for Wordpress plugin for WordPress is vulnerable to SQL Injection via the 'view-attendance' page in all versions up to, and includ…
CVE-2024-12607Medium6.52025-03-07The School Management System for Wordpress plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter of the 'mj_smgt_show_event_task' AJAX act…
CVE-2024-9942Critical9.82024-11-23The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the MJ_gmgt_use…
CVE-2024-9941High8.82024-11-23The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the MJ_gmgt_add_sta…
CVE-2024-9660High8.82024-11-23The School Management System for Wordpress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the mj_smgt_load…
CVE-2024-9659Critical9.82024-11-23The School Management System for Wordpress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the mj_smgt_user…
CVE-2017-14848High8.82017-10-03WPHRM Human Resource Management System for WordPress 1.0 allows SQL Injection via the employee_id parameter.
CVE-2017-14847High8.82017-09-28Mojoomla WPAMS Apartment Management System for WordPress allows SQL Injection via the id parameter.
CVE-2017-14846High8.82017-09-28Mojoomla Hospital Management System for WordPress allows SQL Injection via the id parameter.
CVE-2017-14845High8.82017-09-28Mojoomla WPCHURCH Church Management System for WordPress allows SQL Injection via the id parameter.
CVE-2017-14844High8.82017-09-28Mojoomla WPGYM WordPress Gym Management System allows SQL Injection via the id parameter.
CVE-2017-14843High8.82017-09-28Mojoomla School Management System for WordPress allows SQL Injection via the id parameter.
CVE-2017-14842High8.82017-09-28Mojoomla SMSmaster Multipurpose SMS Gateway for WordPress allows SQL Injection via the id parameter.
CVE-2017-14841Medium6.52017-09-28Mojoomla Annual Maintenance Contract (AMC) Management System allows Arbitrary File Upload in profilesetting image handling.