cve/2024/CVE-2024-9941.md

### [CVE-2024-9941](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9941)
![](https://img.shields.io/static/v1?label=Product&message=WPGYM%20-%20Wordpress%20Gym%20Management%20System&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=*%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=0%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-269%20Improper%20Privilege%20Management&color=brightgreen)

### Description

The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the MJ_gmgt_add_staff_member() function in all versions up to, and including, 67.1.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to create new user accounts with the administrator role.

### POC

#### Reference
- https://codecanyon.net/item/-wpgym-wordpress-gym-management-system/13352964

#### Github
No PoCs found on GitHub currently.