‘Unpatched’ vulnerabilities in Wodify fitness management platform allow attackers to steal gym payments, extract member data

Security researchers have uncovered three vulnerabilities in Wodify app that could allow an authenticated user to modify production data and extract sensitive personal information.