high8.8Public exploit code
CVE-2017-14844
Mojoomla WPGYM WordPress Gym Management System allows SQL Injection via the id parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WordPress Plugin WPGYM - SQL Injection2017-09-26 · webapps · php
Impact
Mojoomla WPGYM WordPress Gym Management System allows SQL Injection via the id parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dasinfomedia | Wpgym Gym Management System | All versions |