Vulnerabilidades de Denishua
CVEs publicadas que afetam produtos de Denishua: 4 registro(s), com severidade, exploração e correções.
CVE-2026-57372
Alta · 7.2
CWE-918 13/07/2026
WordPress WPJAM Basic plugin <= 7.0 - Server Side Request Forgery (SSRF) vulnerability
Server-Side Request Forgery (SSRF) vulnerability in denishua WPJAM Basic wpjam-basic allows Server Side Request Forgery.This issue affects WPJAM Basic: from n/a through <= 7.0.
CVE-2026-57371
Alta · 8.8
CWE-502 13/07/2026
WordPress WPJAM Basic plugin <= 7.0 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in denishua WPJAM Basic wpjam-basic allows Object Injection.This issue affects WPJAM Basic: from n/a through <= 7.0.
CVE-2026-32523
Crítica · 9.9
CWE-434 25/03/2026
Upload irrestrito de arquivo perigoso no plugin WPJAM Basic para WordPress (CVE-2026-32523)
Vulnerabilidade de Upload Irrestrito de Arquivo com Tipo Perigoso em denishua WPJAM Basic wpjam-basic permite Uso de Arquivos Maliciosos.Esta questão afeta WPJAM Basic: de n/a até <= 6.9.2.
CVE-2025-12827
Média · 4.3
CWE-352 18/11/2025
Top Friends <= 0.3 - Cross-Site Request Forgery to Settings Update
The Top Friends plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.3. This is due to missing nonce validation on the top_friends_options_subpanel() function. This makes it possible for unauthenticated attackers to modify plugin settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.