Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

dasinfomedia — Vulnerabilities & Security Advisories 18

Browse all 18 CVE security advisories affecting dasinfomedia. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Dasinfomedia develops digital marketing and content management solutions for businesses. Historically, their products have frequently been affected by remote code execution, cross-site scripting, and privilege escalation vulnerabilities, often stemming from insufficient input validation and access controls. While no major public security incidents have been widely documented, the 18 CVEs on record indicate consistent security challenges, particularly in web application components. Their software typically requires regular patching to address authentication flaws and insecure default configurations. The company's solutions remain attractive to small to medium enterprises despite these vulnerabilities, necessitating robust security practices from implementation through ongoing maintenance.

CVE ID Title CVSS Severity Published
CVE-2025-31643 WordPress WPCHURCH plugin <= 2.7.0 - Privilege Escalation Vulnerability — WPCHURCH CWE-266 8.8 High 2026-01-07
CVE-2025-31642 WordPress WPCHURCH plugin <= 2.7.0 - Reflected Cross Site Scripting (XSS) vulnerability — WPCHURCH CWE-79 7.1 High 2026-01-06
CVE-2025-7049 WPGYM - Wordpress Gym Management System <= 67.7.0 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover — WPGYM - Wordpress Gym Management System CWE-639 8.8 High 2025-09-10
CVE-2025-6079 School Management System <= 93.2.0 - Authenticated (Student+) Arbitrary File Upload — School Management System for Wordpress CWE-434 8.8 High 2025-08-16
CVE-2025-6080 WPGYM <= 67.7.0 - Missing Authorization to Admin Account Creation — WPGYM - Wordpress Gym Management System CWE-269 8.8 High 2025-08-16
CVE-2025-3671 WPGYM - Wordpress Gym Management System <= 67.7.0 - Authenticated (Subscriber+) Local File Inclusion to Privilege Escalation via Password Update — WPGYM - Wordpress Gym Management System CWE-22 8.8 High 2025-08-16
CVE-2024-12612 School Management System for Wordpress <= 93.2.0 - Unauthenticated SQL Injection — School Management System for Wordpress CWE-89 7.5 High 2025-08-16
CVE-2025-3740 School Management System for Wordpress <= 93.1.0 - Authenticated (Subscriber+) Local File Inclusion to Privilege Escalation via Password Update — School Management System for Wordpress CWE-22 8.8 High 2025-07-18
CVE-2025-7442 WPGYM - Wordpress Gym Management System < 67.8.0 - Unauthenticated SQL Injection — WPGYM - Wordpress Gym Management System CWE-89 7.5 High 2025-07-11
CVE-2024-9658 School Management System for Wordpress <= 93.0.0 - Authenticated (Student+) Account Takeover and Privilege Escalation — School Management System for Wordpress CWE-288 8.8 High 2025-03-07
CVE-2024-12609 School Management System for Wordpress <= 92.0.0 - Authenticated (Student+) SQL Injection via 'view-attendance' — School Management System for Wordpress CWE-89 6.5 Medium 2025-03-07
CVE-2024-12610 School Management System for Wordpress <= 93.0.0 - Missing Authorization to Unauthenticated Arbitrary Post Deletion — School Management System for Wordpress CWE-862 5.3 Medium 2025-03-07
CVE-2024-12611 School Management System for Wordpress <= 93.0.0 - Reflected Cross-Site Scripting — School Management System for Wordpress CWE-862 5.3 Medium 2025-03-07
CVE-2024-12607 School Management System for Wordpress <= 92.0.0 - Authenticated (Subscriber+) SQL Injection via 'mj_smgt_show_event_task' — School Management System for Wordpress CWE-89 6.5 Medium 2025-03-07
CVE-2024-9659 School Management <= 91.5.0 - Unauthenticated Arbitrary File Upload — School Management System for Wordpress CWE-434 9.8 Critical 2024-11-23
CVE-2024-9941 WPGYM <= 67.1.0 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation — WPGYM - Wordpress Gym Management System CWE-269 8.8 High 2024-11-23
CVE-2024-9942 WPGYM <= 67.1.0 - Unauthenticated Arbitrary File Upload — WPGYM - Wordpress Gym Management System CWE-434 9.8 Critical 2024-11-23
CVE-2024-9660 School Management <= 91.5.0 - Authenticated (Student+) Arbitrary File Upload — School Management System for Wordpress CWE-434 8.8 High 2024-11-23

This page lists every published CVE security advisory associated with dasinfomedia. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.