PULSEUnderground Intel

LIVE31signals / 24h

FEED

ransombooba project reclama a Aesthetic Specialty Centre · PK · Healthcareransombooba project reclama a City of Big Spring · US · Government & Defenseransombooba project reclama a KING FAMILY MEDICAL · US · Healthcareransombooba project reclama a Charter Township of Commerce · US · Government & Defenseransombooba project reclama a Regent Christian Online Academy · CA · Educationransomaurora reclama a GreenbergFarrow · Professional Servicesransomwallstreet reclama a Bristol City Council · GB · Government & Defenseransomqilin reclama a NuVista Federal Credit Union · US · Financial Servicesransomqilin reclama a Hawaii Law Enforcement Fedral Credit Union · US · Financial Servicesransomn0n reclama a Company #111 · AEransomeverest reclama a OR Technology · Technologyransomeverest reclama a Burris & MacOmber · Professional Servicesransomeverest reclama a Energy Storage Terminal in Singapore · SG · Energy & Utilitiesransomeverest reclama a Point Robotics · Technologyransombooba project reclama a Aesthetic Specialty Centre · PK · Healthcareransombooba project reclama a City of Big Spring · US · Government & Defenseransombooba project reclama a KING FAMILY MEDICAL · US · Healthcareransombooba project reclama a Charter Township of Commerce · US · Government & Defenseransombooba project reclama a Regent Christian Online Academy · CA · Educationransomaurora reclama a GreenbergFarrow · Professional Servicesransomwallstreet reclama a Bristol City Council · GB · Government & Defenseransomqilin reclama a NuVista Federal Credit Union · US · Financial Servicesransomqilin reclama a Hawaii Law Enforcement Fedral Credit Union · US · Financial Servicesransomn0n reclama a Company #111 · AEransomeverest reclama a OR Technology · Technologyransomeverest reclama a Burris & MacOmber · Professional Servicesransomeverest reclama a Energy Storage Terminal in Singapore · SG · Energy & Utilitiesransomeverest reclama a Point Robotics · Technology

CVE WatchOct 24, 2026

CVE-2026-66432

Subscriber Sensitive Data Exposure in WPJAM Basic <= 7.0.2.1 versions.

CVSS

7.5

High

EPSS

0.4%

p36

KEV

—

Exploit Today

11

0-100

Published: Aug 13, 2026 · Last modified: Oct 24, 2026 · CWE-1258

EPSS · 30d

0.4%EPSS · 30 days0.4%

2026-09-282026-10-26

Technical description

Subscriber Sensitive Data Exposure in WPJAM Basic <= 7.0.2.1 versions.

Official references

patchstack.comhttps://patchstack.com/database/wordpress/plugin/wpjam-basic/vulnerability/wordpress-wpjam-basic-plugin-7-0-2-1-sensitive-data-exposure-vulnerability?_s_id=cve

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-651274.1 MED

——6NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause exposure of sensitive system information due to uncleared debug information. A successful exploit of this vulnerability might lead to information disclosure.28d CVE-2026-802392.4 LOW

——3Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Exposure of Sensitive System Information Due to Uncleared Debug Information vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to information exposure.48d CVE-2026-797273.3 LOW

——1Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Exposure of Sensitive System Information Due to Uncleared Debug Information vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information exposure.48d CVE-2026-526967.5 HIG

——4Unauthenticated Sensitive Data Exposure in JetBlog <= 2.4.8 versions.1d CVE-2025-154809.1 CRI

——7In Ubuntu, ubuntu-desktop-provision version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, ubuntu-desktop-provision could include the user's password hash in the attached logs.20d CVE-2025-145518.1 HIG

——6In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, Subiquity could include certain user credentials, such as the user's plaintext Wi-Fi password, in the attached logs.20d