CVE-2026-57372
HighCVSS 7.2Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
SSRF vulnerability in the WPJAM Basic plugin allows an attacker to send requests from the server to internal network resources. The issue affects versions up to and including 7.0.
Risk Assessment
An attacker can exploit this vulnerability to scan internal networks, access sensitive data, or launch attacks against other systems within the infrastructure.
Recommendation
It is recommended to immediately update the WPJAM Basic plugin to the latest available version that fixes this vulnerability.
Other vulnerabilities in WPJAM Basic
See all- CVE-2026-61966Critical
Subscriber SQL Injection vulnerability in WPJAM Basic versions up to 7.0.1. A user with subscriber role can execute arbitrary SQL queries.
- CVE-2026-66432High
Subscriber Sensitive Data Exposure vulnerability in WPJAM Basic versions up to 7.0.2.1.
- CVE-2026-57371High
The WPJAM Basic plugin version 7.0 and earlier contains a deserialization of untrusted data vulnerability allowing object injection. An attacker can exploit this flaw to execute arbitrary code or perform other unauthorized actions.
Original NVD description (English source)
Server-Side Request Forgery (SSRF) vulnerability in denishua WPJAM Basic wpjam-basic allows Server Side Request Forgery.This issue affects WPJAM Basic: from n/a through <= 7.0.