Unknown ChamaWP

• CVE-2026-16300 Critical 9.8 Chama < 1.0.13 - Unauthenticated Arbitrary User Password Reset 0.5%
• CVE-2025-15672 High 8.1 Chama < 1.0.13 - Unauthenticated PHP Object Injection 0.6%