High · 8.8 CVE-2025-47631 EUVD-2025-28105GHSA-mqvg-gc79-6rxx

WordPress Hospital Management System plugin <= 47.0(20-11-2023) - Privilege Escalation vulnerability

Published May 23, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: mojoomla Product: Hospital Management System

Description

Incorrect Privilege Assignment vulnerability in mojoomla Hospital Management System allows Privilege Escalation. This issue affects Hospital Management System: from 47.0(20 through 11.

Affected products

Vendor	Product	Affected	Fixed
mojoomla	Hospital Management System	47.0(20 – ≤ 11	—

References

https://patchstack.com/database/wordpress/plugin/hospital-management/vulnerability/wordpress-hospital-management-system-plugin-47-0-20-11-2023-privilege-escalation-vulnerability?_s_id=cve vdb-entry