CVE-2026-66432
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk33th percentile - higher than 33% of all known CVEs
Summary
Subscriber Sensitive Data Exposure vulnerability in WPJAM Basic versions up to 7.0.2.1.
Risk Assessment
A user with subscriber role may gain access to sensitive data, potentially leading to confidentiality breaches.
Recommendation
Update the plugin to the latest version that restricts data access for subscribers.
Other vulnerabilities in WPJAM Basic
See all- CVE-2026-61966Critical
Subscriber SQL Injection vulnerability in WPJAM Basic versions up to 7.0.1. A user with subscriber role can execute arbitrary SQL queries.
- CVE-2026-57372High
SSRF vulnerability in the WPJAM Basic plugin allows an attacker to send requests from the server to internal network resources. The issue affects versions up to and including 7.0.
- CVE-2026-57371High
The WPJAM Basic plugin version 7.0 and earlier contains a deserialization of untrusted data vulnerability allowing object injection. An attacker can exploit this flaw to execute arbitrary code or perform other unauthorized actions.
Original NVD description (English source)
Subscriber Sensitive Data Exposure in WPJAM Basic <= 7.0.2.1 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS