69 matches found
CVE-2026-125443
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Denishua WPJAM Basic wpjam-basic allows DOM-Based XSS.This issue affects WPJAM Basic: from n/a through 7.1.2...
CVE-2026-125452
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Denishua WPJAM Basic wpjam-basic allows Reflected XSS.This issue affects WPJAM Basic: from n/a through 7.1.2...
CVE-2026-125452 WordPress WPJAM Basic plugin <= 7.1.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Denishua WPJAM Basic wpjam-basic allows Reflected XSS.This issue affects WPJAM Basic: from n/a through 7.1.2...
CVE-2026-125452
The Denishua WPJAM Basic WordPress plugin (versions 7.1.2 and below ) is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw. This vulnerability arises from the improper neutralization of input during web page generation, allowing an attacker to execute arbitrary scripts in a user's browser...
EUVD-2026-125405
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Denishua WPJAM Basic wpjam-basic allows Reflected XSS.This issue affects WPJAM Basic: from n/a through 7.1.2...
WordPress WPJAM Basic plugin <= 7.1.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by mroccon in WordPress Plugin WPJAM Basic versions = 7.1.2...
PT-2026-146913
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Denishua WPJAM Basic wpjam-basic allows Reflected XSS.This issue affects WPJAM Basic: from n/a through 7.1.2...
WordPress WPJAM Basic plugin <= 7.1.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by John Ryan Albon in WordPress Plugin WPJAM Basic versions = 7.1.2...
CVE-2026-103900
The WPJAM Basic plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 7.1 This is due to the WPJAMUserSignup::signup function unpacking attacker-supplied dataargs from the AJAX POST body and merging it via PHP array union into the payload passed to...
CVE-2026-103900 WPJAM Basic <= 7.1 - Unauthenticated Privilege Escalation to 'data[args][role]' Parameter
The WPJAM Basic plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 7.1 This is due to the WPJAMUserSignup::signup function unpacking attacker-supplied dataargs from the AJAX POST body and merging it via PHP array union into the payload passed to...
EUVD-2026-119036
The WPJAM Basic plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 7.1 This is due to the WPJAMUserSignup::signup function unpacking attacker-supplied dataargs from the AJAX POST body and merging it via PHP array union into the payload passed to...
CVE-2026-103900
The WPJAM Basic plugin for WordPress (versions
WordPress WPJAM Basic plugin <= 7.1 - Unauthenticated Privilege Escalation to 'data[args][role]' Parameter vulnerability
Unauthenticated Privilege Escalation to 'dataargsrole' Parameter vulnerability discovered by nudien in WordPress Plugin WPJAM Basic versions = 7.1...
CVE-2026-66432
Subscriber Sensitive Data Exposure in WPJAM Basic = 7.0.2.1 versions...
CVE-2026-61966
Subscriber SQL Injection in WPJAM Basic = 7.0.1 versions...
EUVD-2026-57865
Subscriber Sensitive Data Exposure in WPJAM Basic = 7.0.2.1 versions...
CVE-2026-66432 WordPress WPJAM Basic plugin <= 7.0.2.1 - Sensitive Data Exposure vulnerability
Subscriber Sensitive Data Exposure in WPJAM Basic = 7.0.2.1 versions...
CVE-2026-66432
CVE-2026-66432 affects the WordPress WPJAM Basic plugin, versions
