CVE-2026-57371: WordPress WPJAM Basic plugin <= 7.0 - PHP Object Injection vulnerability

Q: Who can exploit this issue?

The CVSS vector indicates that exploitation is network-accessible, requires low privileges, and does not require user interaction. An attacker would need an account or other access path with the required low-level privileges.

Q: Are installations running version 7.0 affected?

Yes. The affected range includes WPJAM Basic versions through and including 7.0; the earliest affected version is not specified.

Q: What is the potential impact if exploitation succeeds?

The published severity is high with a CVSS score of 8.8. The vector rates confidentiality, integrity, and availability impact as high.

Published Jul 13, 2026

Updated

Deserialization of Untrusted Data vulnerability in denishua WPJAM Basic wpjam-basic allows Object Injection.This issue affects WPJAM Basic: from n/a through <= 7.0.

Affected Software

1 affected component

Denishua WPJAM Basic<=7.0

Event History

Jul 13, 2026

CVE Published

via MITRE·08:41 AM

Data Sourced

via MITRE·08:41 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·10:16 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

The CVSS vector indicates that exploitation is network-accessible, requires low privileges, and does not require user interaction. An attacker would need an account or other access path with the required low-level privileges.

Are installations running version 7.0 affected?

Yes. The affected range includes WPJAM Basic versions through and including 7.0; the earliest affected version is not specified.

What is the potential impact if exploitation succeeds?

The published severity is high with a CVSS score of 8.8. The vector rates confidentiality, integrity, and availability impact as high.

CVE-2026-57371: WordPress WPJAM Basic plugin <= 7.0 - PHP Object Injection vulnerability

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

Are installations running version 7.0 affected?

What is the potential impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

Are installations running version 7.0 affected?

What is the potential impact if exploitation succeeds?