Lucene search
+L
MojoomlaWordpress Gym Management System

2 matches found

CVE
CVE
added 2024/11/23 7:38 a.m.74 views

CVE-2024-9942

The CVE-2024-9942 entry concerns the WPGYM WordPress Gym Management System plugin. A missing file-type validation in MJ_gmgt_user_avatar_image_upload() allows unauthenticated arbitrary file uploads on all versions up to 67.1.0, potentially enabling remote code execution on the affected site. Conn...

9.8CVSS9.9AI score0.01145EPSS
Save
CVE
CVE
added 2024/11/23 7:38 a.m.70 views

CVE-2024-9941

The CVE-2024-9941 entry concerns the WPGYM WordPress plugin (versions

8.8CVSS8.6AI score0.00582EPSS
Save