CVE Catalog

CVE-2026-66432

HighCVSS 7.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.40%

33th percentile - higher than 33% of all known CVEs

Summary

Subscriber Sensitive Data Exposure vulnerability in WPJAM Basic versions up to 7.0.2.1.

Risk Assessment

A user with subscriber role may gain access to sensitive data, potentially leading to confidentiality breaches.

Recommendation

Update the plugin to the latest version that restricts data access for subscribers.

Original NVD description (English source)

Subscriber Sensitive Data Exposure in WPJAM Basic <= 7.0.2.1 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS