{"schema_version":1,"title":"CodeAstro Membership Management System vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 12 vulnerabilities in CodeAstro Membership Management System: 0 in the last 7 days and 8 in the last 90 days, 2 of them critical and 0 exploited in the wild. The most recent, CVE-2025-69938, was published on 30 July 2026.","url":"https://junglewise.ai/threats/technologies/membership-management-system","json_url":"https://junglewise.ai/threats/technologies/membership-management-system.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/membership-management-system","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":1,"all_time":12,"critical":2,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":8,"last_365_days":12},"latest":[{"cve":"CVE-2025-69938","cvss":7.5,"slug":"cve-2025-69938-codeastro-membership-management-system-sql-injection-in-renew-php","title":"CodeAstro Membership Management System SQL injection in renew.php","severity":"info","exploited":false,"published_at":"2026-07-30T21:16:52.67+00:00","url":"https://junglewise.ai/threats/cve-2025-69938-codeastro-membership-management-system-sql-injection-in-renew-php"},{"cve":"CVE-2025-69937","slug":"cve-2025-69937-codeastro-membership-management-system-sql-injection-in-edit-type","title":"CodeAstro Membership Management System SQL injection in edit_type.php","severity":"info","exploited":false,"published_at":"2026-07-30T21:16:52.563+00:00","url":"https://junglewise.ai/threats/cve-2025-69937-codeastro-membership-management-system-sql-injection-in-edit-type"},{"cve":"CVE-2025-69936","cvss":7.5,"slug":"cve-2025-69936-codeastro-membership-management-system-sql-injection-in-edit","title":"CodeAstro Membership Management System SQL injection in edit_member.php","severity":"info","exploited":false,"published_at":"2026-07-30T21:16:52.453+00:00","url":"https://junglewise.ai/threats/cve-2025-69936-codeastro-membership-management-system-sql-injection-in-edit"},{"cve":"CVE-2025-69935","slug":"cve-2025-69935-codeastro-membership-management-system-sql-injection-in-reporting","title":"CodeAstro Membership Management System SQL injection in reporting modules","severity":"info","exploited":false,"published_at":"2026-07-30T21:16:52.333+00:00","url":"https://junglewise.ai/threats/cve-2025-69935-codeastro-membership-management-system-sql-injection-in-reporting"},{"cve":"CVE-2025-69934","slug":"cve-2025-69934-codeastro-membership-management-system-sql-injection-in-delete","title":"CodeAstro Membership Management System SQL injection in delete_members.php","severity":"info","exploited":false,"published_at":"2026-07-30T21:16:52.223+00:00","url":"https://junglewise.ai/threats/cve-2025-69934-codeastro-membership-management-system-sql-injection-in-delete"},{"cve":"CVE-2025-69933","slug":"cve-2025-69933-codeastro-membership-management-system-sql-injection-in","title":"CodeAstro Membership Management System SQL injection in memberProfile.php","severity":"info","exploited":false,"published_at":"2026-07-30T21:16:52.12+00:00","url":"https://junglewise.ai/threats/cve-2025-69933-codeastro-membership-management-system-sql-injection-in"},{"cve":"CVE-2025-69931","cvss":7.5,"slug":"cve-2025-69931-codeastro-membership-management-system-sql-injection-in-delete","title":"CodeAstro Membership Management System SQL injection in delete_membership.php","severity":"info","exploited":false,"published_at":"2026-07-30T21:16:52.007+00:00","url":"https://junglewise.ai/threats/cve-2025-69931-codeastro-membership-management-system-sql-injection-in-delete"},{"cve":"CVE-2025-69930","cvss":7.5,"slug":"cve-2025-69930-codeastro-membership-management-system-sql-injection-in-print","title":"CodeAstro Membership Management System SQL injection in print_membership_card.php","severity":"info","exploited":false,"published_at":"2026-07-30T21:16:51.893+00:00","url":"https://junglewise.ai/threats/cve-2025-69930-codeastro-membership-management-system-sql-injection-in-print"},{"cve":"CVE-2026-36387","cvss":6.5,"epss":0.0027,"slug":"cve-2026-36387-codeastro-membership-management-system-rce-in-add-members-php","title":"CODEASTRO Membership Management System RCE in add_members.php","severity":"medium","exploited":false,"published_at":"2026-05-07T16:16:19.013+00:00","url":"https://junglewise.ai/threats/cve-2026-36387-codeastro-membership-management-system-rce-in-add-members-php"},{"cve":"CVE-2025-70150","cvss":9.8,"epss":0.0066,"slug":"cve-2025-70150-codeastro-membership-management-system-missing-authentication-and","title":"CodeAstro Membership Management System missing authentication and SQL injection in delete_members.php","severity":"critical","exploited":false,"published_at":"2026-02-18T18:24:20.04+00:00","url":"https://junglewise.ai/threats/cve-2025-70150-codeastro-membership-management-system-missing-authentication-and"},{"cve":"CVE-2025-70148","cvss":7.5,"epss":0.0044,"slug":"cve-2025-70148-codeastro-membership-management-system-insecure-direct-object","title":"CodeAstro Membership Management System insecure direct object reference in print_membership_card.php","severity":"high","exploited":false,"published_at":"2026-02-18T18:24:19.79+00:00","url":"https://junglewise.ai/threats/cve-2025-70148-codeastro-membership-management-system-insecure-direct-object"},{"cve":"CVE-2025-70149","cvss":9.8,"epss":0.0039,"slug":"cve-2025-70149-codeastro-membership-management-system-sql-injection-in-print","title":"CodeAstro Membership Management System SQL injection in print_membership_card.php","severity":"critical","exploited":false,"published_at":"2026-02-18T17:21:36.16+00:00","url":"https://junglewise.ai/threats/cve-2025-70149-codeastro-membership-management-system-sql-injection-in-print"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":8},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"CodeAstro Apartment Visitor Management System","slug":"apartment-visitor-management-system","vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/apartment-visitor-management-system"},{"name":"CodeAstro Leave Management System","slug":"leave-management-system","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/leave-management-system"},{"name":"CodeAstro Online Classroom","slug":"online-classroom","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/online-classroom"},{"name":"CodeAstro Student-Attendance-Management-System","slug":"student-attendance-management-system","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/student-attendance-management-system"},{"name":"CodeAstro Ecommerce Website","slug":"ecommerce-website","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/ecommerce-website"},{"name":"CodeAstro Simple Online Leave Management System","slug":"simple-online-leave-management-system","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/simple-online-leave-management-system"},{"name":"CodeAstro Payroll System","slug":"payroll-system","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/payroll-system"}],"technology":{"hub":true,"name":"CodeAstro Membership Management System","slug":"membership-management-system","vendor":{"name":"CodeAstro","slug":"codeastro","url":"https://junglewise.ai/threats/vendors/codeastro"},"aliases":[],"category":"web-application","homepage":"https://codeastro.com/membership-management-system-in-php-with-source-code/","repo_url":"https://github.com/codeastro/Membership-Management-System-PHP","description":"Membership Management System is a web application designed to manage member records, subscriptions, and organizational data.","url":"https://junglewise.ai/threats/technologies/membership-management-system"},"most_severe":[{"cve":"CVE-2025-70150","cvss":9.8,"epss":0.0066,"slug":"cve-2025-70150-codeastro-membership-management-system-missing-authentication-and","title":"CodeAstro Membership Management System missing authentication and SQL injection in delete_members.php","severity":"critical","exploited":false,"published_at":"2026-02-18T18:24:20.04+00:00","url":"https://junglewise.ai/threats/cve-2025-70150-codeastro-membership-management-system-missing-authentication-and"},{"cve":"CVE-2025-70149","cvss":9.8,"epss":0.0039,"slug":"cve-2025-70149-codeastro-membership-management-system-sql-injection-in-print","title":"CodeAstro Membership Management System SQL injection in print_membership_card.php","severity":"critical","exploited":false,"published_at":"2026-02-18T17:21:36.16+00:00","url":"https://junglewise.ai/threats/cve-2025-70149-codeastro-membership-management-system-sql-injection-in-print"},{"cve":"CVE-2025-70148","cvss":7.5,"epss":0.0044,"slug":"cve-2025-70148-codeastro-membership-management-system-insecure-direct-object","title":"CodeAstro Membership Management System insecure direct object reference in print_membership_card.php","severity":"high","exploited":false,"published_at":"2026-02-18T18:24:19.79+00:00","url":"https://junglewise.ai/threats/cve-2025-70148-codeastro-membership-management-system-insecure-direct-object"},{"cve":"CVE-2026-36387","cvss":6.5,"epss":0.0027,"slug":"cve-2026-36387-codeastro-membership-management-system-rce-in-add-members-php","title":"CODEASTRO Membership Management System RCE in add_members.php","severity":"medium","exploited":false,"published_at":"2026-05-07T16:16:19.013+00:00","url":"https://junglewise.ai/threats/cve-2026-36387-codeastro-membership-management-system-rce-in-add-members-php"},{"cve":"CVE-2025-69938","cvss":7.5,"slug":"cve-2025-69938-codeastro-membership-management-system-sql-injection-in-renew-php","title":"CodeAstro Membership Management System SQL injection in renew.php","severity":"info","exploited":false,"published_at":"2026-07-30T21:16:52.67+00:00","url":"https://junglewise.ai/threats/cve-2025-69938-codeastro-membership-management-system-sql-injection-in-renew-php"},{"cve":"CVE-2025-69936","cvss":7.5,"slug":"cve-2025-69936-codeastro-membership-management-system-sql-injection-in-edit","title":"CodeAstro Membership Management System SQL injection in edit_member.php","severity":"info","exploited":false,"published_at":"2026-07-30T21:16:52.453+00:00","url":"https://junglewise.ai/threats/cve-2025-69936-codeastro-membership-management-system-sql-injection-in-edit"},{"cve":"CVE-2025-69931","cvss":7.5,"slug":"cve-2025-69931-codeastro-membership-management-system-sql-injection-in-delete","title":"CodeAstro Membership Management System SQL injection in delete_membership.php","severity":"info","exploited":false,"published_at":"2026-07-30T21:16:52.007+00:00","url":"https://junglewise.ai/threats/cve-2025-69931-codeastro-membership-management-system-sql-injection-in-delete"},{"cve":"CVE-2025-69930","cvss":7.5,"slug":"cve-2025-69930-codeastro-membership-management-system-sql-injection-in-print","title":"CodeAstro Membership Management System SQL injection in print_membership_card.php","severity":"info","exploited":false,"published_at":"2026-07-30T21:16:51.893+00:00","url":"https://junglewise.ai/threats/cve-2025-69930-codeastro-membership-management-system-sql-injection-in-print"},{"cve":"CVE-2025-69937","slug":"cve-2025-69937-codeastro-membership-management-system-sql-injection-in-edit-type","title":"CodeAstro Membership Management System SQL injection in edit_type.php","severity":"info","exploited":false,"published_at":"2026-07-30T21:16:52.563+00:00","url":"https://junglewise.ai/threats/cve-2025-69937-codeastro-membership-management-system-sql-injection-in-edit-type"},{"cve":"CVE-2025-69935","slug":"cve-2025-69935-codeastro-membership-management-system-sql-injection-in-reporting","title":"CodeAstro Membership Management System SQL injection in reporting modules","severity":"info","exploited":false,"published_at":"2026-07-30T21:16:52.333+00:00","url":"https://junglewise.ai/threats/cve-2025-69935-codeastro-membership-management-system-sql-injection-in-reporting"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}