Denishua vulnerabilities
8 published CVEs name Denishua among the affected products.
- 8Published CVEs8 of them scored
- 7Last 12 monthspublished in the last year
- 2Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-103900
WPJAM Basic <= 7.1 - Unauthenticated Privilege Escalation to 'data[args][role]' Parameter
denishua · WPJAM Basic
High8.1 - CVE-2026-66432
WordPress WPJAM Basic plugin <= 7.0.2.1 - Sensitive Data Exposure vulnerability
denishua · WPJAM Basic
High7.5 - CVE-2026-61966
WordPress WPJAM Basic plugin <= 7.0.1 - SQL Injection vulnerability
denishua · WPJAM Basic
Critical9.3 - CVE-2026-57372
WordPress WPJAM Basic plugin <= 7.0 - Server Side Request Forgery (SSRF) vulnerability
denishua · WPJAM Basic
High7.2 - CVE-2026-57371
WordPress WPJAM Basic plugin <= 7.0 - PHP Object Injection vulnerability
denishua · WPJAM Basic
High8.8 - CVE-2026-32523
WordPress WPJAM Basic plugin <= 6.9.2 - Arbitrary File Upload vulnerability
denishua · WPJAM Basic
Critical9.9 - CVE-2025-12827
Top Friends <= 0.3 - Cross-Site Request Forgery to Settings Update
denishua · Top Friends
Medium4.3 - CVE-2023-25051
WordPress Comment Reply Notification Plugin <= 1.4 is vulnerable to Cross Site Request Forgery (CSRF)
Denishua · Comment Reply Notification
Medium4.3