Skip to content
OpenAdvisories

Product · denishua

WPJAM Basic

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.1
    CVE-2026-103900

    WPJAM Basic <= 7.1 - Unauthenticated Privilege Escalation to 'data[args][role]' Parameter

    The WPJAM Basic plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 7.1 This is due to the WPJAM_User_Signup::signup() function unpacking attacker-supplied `data[args]` from the AJAX POST body and merging it via PHP ar…

    denishua WPJAM Basic Web / CMS
  • High 7.5
    CVE-2026-66432

    WordPress WPJAM Basic plugin <= 7.0.2.1 - Sensitive Data Exposure vulnerability

    Subscriber Sensitive Data Exposure in WPJAM Basic <= 7.0.2.1 versions.

    denishua WPJAM Basic
  • High 8.8
    CVE-2026-57371

    WordPress WPJAM Basic plugin <= 7.0 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in denishua WPJAM Basic wpjam-basic allows Object Injection.This issue affects WPJAM Basic: from n/a through <= 7.0.

    denishua WPJAM Basic
  • High 7.2
    CVE-2026-57372

    WordPress WPJAM Basic plugin <= 7.0 - Server Side Request Forgery (SSRF) vulnerability

    Server-Side Request Forgery (SSRF) vulnerability in denishua WPJAM Basic wpjam-basic allows Server Side Request Forgery.This issue affects WPJAM Basic: from n/a through <= 7.0.

    denishua WPJAM Basic