CVE-2026-57372 describes a Server-Side Request Forgery (SSRF) vulnerability in the denishua WPJAM Basic WordPress plugin affecting versions up to 7.0 inclusive. The vulnerability allows unauthenticated attackers to cause the server to send crafted HTTP requests to arbitrary domains, potentially leading to information disclosure and integrity issues. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and a scope change. No vendor advisory or patch information is currently available, and no known exploits have been reported.

Successful exploitation could allow an attacker to make the vulnerable server perform HTTP requests to internal or external resources, potentially leading to limited confidentiality and integrity impacts. There is no indication of availability impact. The vulnerability could be leveraged to access internal services or gather sensitive information accessible from the server environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No specific mitigations or workarounds are provided in the available data.