Denishua

Products

Product	CVEs	Exploited	Latest
WPJAM Basic	6	–	Nov 7, 2026
Comment Reply Notification	1	–	Jul 11, 2023
Top Friends	1	–	Nov 18, 2025

CVE-2026-103900 High 8.1 WPJAM Basic <= 7.1 - Unauthenticated Privilege Escalation to 'data[args][role]' Parameter –
CVE-2026-66432 High 7.5 WordPress WPJAM Basic plugin <= 7.0.2.1 - Sensitive Data Exposure vulnerability 0.4%
CVE-2026-61966 Critical 9.3 WordPress WPJAM Basic plugin <= 7.0.1 - SQL Injection vulnerability 0.4%
CVE-2026-57372 High 7.2 WordPress WPJAM Basic plugin <= 7.0 - Server Side Request Forgery (SSRF) vulnerability 0.3%
CVE-2026-57371 High 8.8 WordPress WPJAM Basic plugin <= 7.0 - PHP Object Injection vulnerability 0.5%
CVE-2026-32523 Critical 9.9 WordPress WPJAM Basic plugin <= 6.9.2 - Arbitrary File Upload vulnerability 0.3%
CVE-2025-12827 Medium 4.3 Top Friends <= 0.3 - Cross-Site Request Forgery to Settings Update 0.1%
CVE-2023-25051 Medium 4.3 WordPress Comment Reply Notification Plugin <= 1.4 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%