CVE-2026-61966

32th percentile - higher than 32% of all known CVEs

Subscriber SQL Injection vulnerability in WPJAM Basic versions up to 7.0.1. A user with subscriber role can execute arbitrary SQL queries.

Risk includes unauthorized access to the database, potentially leading to data leakage, modification, or deletion.

Update the plugin to the latest patched version. Restrict subscriber privileges and monitor logs for suspicious queries.