Threat database

6 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.5	EPSS 0.4%	CVE-2026-66432WPJAM Basic (WordPress plugin) · Exposure of Sensitive System Information Due to Uncleared Debug Information High7.5EPSS 0.4%2026-08-13CVE Database V5CVE-2026-66432 Subscriber Sensitive Data Exposure in WPJAM Basic <= 7.0.2.1 versions. EPSS 0.4%Vulnerability denishua CWE-1258 #ghsa-5wm2-79cj-xgrr	CVE Database V5	2026-08-13
Critical	9.3	EPSS 0.4%	CVE-2026-61966WPJAM Basic (WordPress plugin) · SQL Injection Critical9.3EPSS 0.4%2026-08-13CVE Database V5CVE-2026-61966 Subscriber SQL Injection in WPJAM Basic <= 7.0.1 versions. EPSS 0.4%Vulnerability denishua CWE-89 #ghsa-4qrq-q3mh-x585	CVE Database V5	2026-08-13
High	7.2	EPSS 0.3%	CVE-2026-57372WPJAM Basic (WordPress plugin) · Server-Side Request Forgery (SSRF) High7.2EPSS 0.3%2026-07-13CVE Database V5CVE-2026-57372 Server-Side Request Forgery (SSRF) vulnerability in denishua WPJAM Basic wpjam-basic allows Server Side Request Forgery.This issue affects WPJAM Basic: from n/a through <= 7.0. EPSS 0.3%Vulnerability denishua CWE-918	CVE Database V5	2026-07-13
High	8.8	EPSS 0.5%	CVE-2026-57371WPJAM Basic (WordPress plugin) · Deserialization of Untrusted Data High8.8EPSS 0.5%2026-07-13CVE Database V5CVE-2026-57371 Deserialization of Untrusted Data vulnerability in denishua WPJAM Basic wpjam-basic allows Object Injection.This issue affects WPJAM Basic: from n/a through <= 7.0. EPSS 0.5%Vulnerability denishua CWE-502	CVE Database V5	2026-07-13
Critical	9.9	EPSS 0.3%	CVE-2026-32523WPJAM Basic (WordPress plugin) · Unrestricted File Upload Critical9.9EPSS 0.3%2026-03-25CVE Database V5CVE-2026-32523 Unrestricted Upload of File with Dangerous Type vulnerability in denishua WPJAM Basic wpjam-basic allows Using Malicious Files.This issue affects WPJAM Basic: from n/a through <= 6.9.2. EPSS 0.3%Vulnerability denishua	CVE Database V5	2026-03-25
Medium	4.3	EPSS 0.1%	CVE-2025-12827Top Friends (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.1%2025-11-18CVE Database V5CVE-2025-12827 The Top Friends plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.3. This is due to missing nonce validation on the top_friends_options_subpanel() function. This makes it possible for unauthenticated attackers to modify plugin settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. EPSS 0.1%Vulnerability denishua CWE-352	CVE Database V5	2025-11-18

Page 1 of 1