Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: denishua Clear all filters
TI-2026-86486 CVE-2026-103900 · GHSA-fv42-gp6p-rphg

WPJAM Basic Unauthenticated Privilege Escalation via data[args][role] Parameter

Priority LOW 38

The WPJAM Basic plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 7.1 This is due to the WPJAM_User_Signup::signup() function unpacking attacker-supplied `data[args]` from the A…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00424 Published 2026-11-07 No fix listed CWE-269
TI-2026-41308 CVE-2026-57371 · GHSA-pm67-p66c-w59j

WordPress WPJAM Basic plugin <= 7.0 - PHP Object Injection vulnerability

Priority MEDIUM 41

Deserialization of Untrusted Data vulnerability in denishua WPJAM Basic wpjam-basic allows Object Injection.This issue affects WPJAM Basic: from n/a through <= 7.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00518 Published 2026-07-13 No fix listed CWE-502
TI-2026-25051 CVE-2026-32523 · GHSA-q9fv-jcvh-q4f7

WordPress WPJAM Basic plugin <= 6.9.2 - Arbitrary File Upload vulnerability

Priority MEDIUM 43

Unrestricted Upload of File with Dangerous Type vulnerability in denishua WPJAM Basic wpjam-basic allows Using Malicious Files.This issue affects WPJAM Basic: from n/a through <= 6.9.2.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00331 Published 2026-03-25 No fix listed CWE-434