CVE-2026-32523: WordPress WPJAM Basic plugin <= 6.9.2 - Arbitrary File Upload vulnerability
Published Mar 25, 2026
·Updated
Unrestricted Upload of File with Dangerous Type vulnerability in denishua WPJAM Basic wpjam-basic allows Using Malicious Files.This issue affects WPJAM Basic: from n/a through <= 6.9.2.
Affected Software
1 affected component
Denishua WPJAM Basic<=6.9.2
Event History
Mar 25, 2026
CVE Published
via MITRE·04:15 PM
Data Sourced
via MITRE·04:15 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-32523?
CVE-2026-32523 has a high severity rating as it allows for arbitrary file uploads, potentially enabling the execution of malicious files.
2
How do I fix CVE-2026-32523?
To mitigate the CVE-2026-32523 vulnerability, update the WPJAM Basic plugin to version 6.9.3 or later.
3
What types of files can be uploaded due to CVE-2026-32523?
CVE-2026-32523 allows for the upload of files with dangerous types that can be executed maliciously.
4
Which versions of WPJAM Basic are affected by CVE-2026-32523?
CVE-2026-32523 affects all versions of WPJAM Basic up to and including 6.9.2.
5
Who is the vendor of the affected software for CVE-2026-32523?
Denishua is the vendor of the affected WPJAM Basic plugin related to CVE-2026-32523.