Server-Side Request Forgery Vulnerability in WPJAM Basic by denishua
CVE-2026-57372

7.2HIGH

Key Information:

Vendor

WordPress
Status
WPjam Basic
Vendor
CVE Published:
13 July 2026

What is CVE-2026-57372?

A Server-Side Request Forgery (SSRF) vulnerability exists in the WPJAM Basic plugin developed by denishua. This vulnerability allows attackers to send crafted requests from the server side, potentially leading to unauthorized access to sensitive server-side resources. It affects all versions of WPJAM Basic up to and including version 7.0, highlighting the importance of immediate patching or upgrading to mitigate risks associated with this security flaw.

Affected Version(s)

WPJAM Basic 0 <= 7.0

References

https://patchstack.com/database/Wordpress/Plugin/wpjam-ba...
vdb-entry

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

she11f | Patchstack Bug Bounty Program
.