Access violation vulnerability in WPGYM – WordPress Gym Management System 67.7.0

The WPGYM plugin for WordPress, which is used to manage gyms, has a security vulnerability in all versions up to 67.7.0. This vulnerability, known as Local File Inclusion, allows authenticated attackers with at least Subscriber-level access to include and run any files on the server. This can lead to bypassing security controls, accessing sensitive information, and even executing malicious code. The exploit can also be used to update the password of Super Administrator accounts in Multisite environments, potentially giving attackers more privileges.