CVE Catalog
CVE-2026-61966
CriticalCVSS 9.3Summary
Subscriber SQL Injection vulnerability in WPJAM Basic versions up to 7.0.1. A user with subscriber role can execute arbitrary SQL queries.
Risk Assessment
Risk includes unauthorized access to the database, potentially leading to data leakage, modification, or deletion.
Recommendation
Update the plugin to the latest patched version. Restrict subscriber privileges and monitor logs for suspicious queries.
Original NVD description (English source)
Subscriber SQL Injection in WPJAM Basic <= 7.0.1 versions.