Advisories · Technology

mojoomla WPAMS.

Every CVE that names mojoomla WPAMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-39433 CVE record

CVSS 6.5 Medium

WordPress WPAMS plugin < 49.5.3 - Arbitrary Content Deletion vulnerability
- mojoomla WPAMS
- Broken access control
Not analysed yet 16 Jun 2026
CVE-2025-39392 CVE record

CVSS 7.1 High

WordPress WPAMS plugin <= 44.0 (17-08-2023) - Cross Site Scripting (XSS) vulnerability
- mojoomla WPAMS
- Cross-site scripting (XSS)
Not analysed yet 19 May 2025
CVE-2025-39395 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress WPAMS plugin <= 44.0 (17-08-2023) - SQL Injection vulnerability
- mojoomla WPAMS
- SQL injection
Not analysed yet 19 May 2025
CVE-2025-39401 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

WordPress WPAMS plugin <= 44.0 (17-08-2023) - Arbitrary File Upload vulnerability
- mojoomla WPAMS
- Unrestricted file upload
Not analysed yet 19 May 2025
CVE-2025-39402 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

WordPress WPAMS plugin <= 44.0 (17-08-2023) - Arbitrary File Upload vulnerability
- mojoomla WPAMS
- Unrestricted file upload
Not analysed yet 19 May 2025
CVE-2025-39403 CVE record

CVSS 8.5 High

WordPress WPAMS plugin <= 44.0 (17-08-2023) - SQL Injection vulnerability
- mojoomla WPAMS
- SQL injection
Not analysed yet 19 May 2025
CVE-2025-39405 CVE record

CVSS 8.8 High

WordPress WPAMS plugin <= 44.0 (17-08-2023) - Privilege Escalation vulnerability
- mojoomla WPAMS
- Privilege escalation
Not analysed yet 19 May 2025
CVE-2025-39406 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WordPress WPAMS plugin <= 44.0 - Local File Inclusion to Privilege Escalation vulnerability
- mojoomla WPAMS
- File inclusion
Not analysed yet 19 May 2025