Hospital Management System for Wordpress

Hospital Management System for Wordpress has 7 disclosed vulnerabilities in the WordSec catalog, reported between 2017 and 2025; 1 is fixed and 6 remain unpatched as of September 2026. Their average CVSS score is 8.0, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 4 high. 2025 was the busiest year with 6 disclosures.

The most common weakness is SQL Injection, behind 3 of the records (43%). Other recurring categories include Unrestricted Upload Of File With Dangerous Type, Cross-Site Scripting.

1 of the records (14%) have a vendor fix, while 6 remain unpatched. The oldest unresolved one dates back to 2025.

4 independent researchers contributed these findings, most of them (3) reported by Thái An.

Strategic Overview

Avg CVSSHigh

8.0/ 10

Patch Coverage14%

Open

Fixed

Get automatic notifications for all Hospital Management System for Wordpress vulnerabilities before they are exploited.

Most severe open issueCVSS 9.8CVE-2025-39380

Hospital Management System <= 47.0(20-11-2023) - Unauthenticated Arbitrary File Upload

Read the full analysis

Vulnerability Records

7 records


2025-05-22 00:00	Hospital Management System <= 47.0(20-11-2023) - Authenticated (Subscriber+) Privilege Escalation Hospital Management System for Wordpress <= 47.0(20-11-2023)	`CVE-2025-47631`	8.8 High	Cút lộn xào me	No
2025-05-20 00:00	Hospital Management System <= 47.0(20-11-2023) - Authenticated (Subscriber+) Arbitrary File Upload Hospital Management System for Wordpress <= 47.0(20-11-2023)	`CVE-2025-47663`	8.8 High	Cút lộn xào me	No
2025-04-22 00:00	Hospital Management System <= 47.0(20-11-2023) - Unauthenticated SQL Injection Hospital Management System for Wordpress <= 47.0(20-11-2023)	`CVE-2025-39386`	7.5 High	Trương Hữu Phúc (truonghuuphuc)	No
2025-04-22 00:00	Hospital Management System <= 47.0(20-11-2023) - Unauthenticated Arbitrary File Upload Hospital Management System for Wordpress <= 47.0(20-11-2023)	`CVE-2025-39380`	9.8 Critical	Thái An	No
2025-04-22 00:00	Hospital Management System <= 47.0(20-11-2023) - Reflected Cross-Site Scripting Hospital Management System for Wordpress <= 47.0(20-11-2023)	`CVE-2025-39393`	6.1 Medium	Thái An	No
2025-04-21 00:00	Hospital Management System <= 47.0(20-11-2023) - Authenticated (Subscriber+) SQL Injection Hospital Management System for Wordpress <= 47.0(20-11-2023)	`CVE-2025-39357`	6.5 Medium	Thái An	No
2017-09-26 00:00	Mojoomla Hospital Management System for WordPress Theme < 22-05-2018 - SQL Injection Hospital Management System for Wordpress <= 08-03-2018	`CVE-2017-14846`	8.8 High	Ihsan Sencan	Yes

Showing 1–7 of 7 reports