WordPress WPJAM Basic plugin <= 7.0.1 - SQL Injection vulnerability
Subscriber SQL Injection in WPJAM Basic <= 7.0.1 versions.
No denishua vulnerabilities are listed in CISA KEV.
7 records
Subscriber SQL Injection in WPJAM Basic <= 7.0.1 versions.
Unrestricted Upload of File with Dangerous Type vulnerability in denishua WPJAM Basic wpjam-basic allows Using Malicious Files.This issue affects WPJAM Basic: from n/a through <= 6.9.2.
Deserialization of Untrusted Data vulnerability in denishua WPJAM Basic wpjam-basic allows Object Injection.This issue affects WPJAM Basic: from n/a through <= 7.0.
Subscriber Sensitive Data Exposure in WPJAM Basic <= 7.0.2.1 versions.
Server-Side Request Forgery (SSRF) vulnerability in denishua WPJAM Basic wpjam-basic allows Server Side Request Forgery.This issue affects WPJAM Basic: from n/a through <= 7.0.
The WPJAM Basic plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 7.1 This is due to the WPJAM_User_Signup::signup() function unpacking attacker-supplied `data[args]` from the A…
The Top Friends plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.3.