WPGYM

Wordpress Gym Management System plugin <= 67.7.0 Authenticated (Subscriber+) Privilege Escalation via Account Takeover vulnerability <= 67.7.0

Wordpress Gym Management System plugin <= 67.7.0 Authenticated (Subscriber+) Local File Inclusion to Privilege Escalation via Password Update vulnerability <= 67.7.0

Missing Authorization to Admin Account Creation vulnerability <= 67.7.0

SQL Injection vulnerability <= 65.0

Local File Inclusion Vulnerability <= 65.0