CVE-2026-103900

The WPJAM Basic plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 7.1 This is due to the WPJAMUserSignup::signup function unpacking attacker-supplied dataargs from the AJAX POST body and merging it via PHP array union into the payload passed to...