Approved changes feed: RSS · Atom

cpe:2.3:a:mojoomla:wpams:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMojoomla (723d8d71-8722-5481-8521-63e781b12f90)
ProductWpams (04613f1a-492b-54e4-8d7c-db3151625b5c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-39433 vulnerable 2026-07-29 00:46:18.872671 WordPress WPAMS plugin < 49.5.3 - Arbitrary Content Deletion vulnerability
MEDIUM (6.5)
Subscriber Arbitrary Content Deletion in WPAMS < 49.5.3 versions.
Published: 2026-06-16T20:57:24.962Z
Updated: 2026-06-17T10:43:13.208Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-39406 vulnerable 2026-06-08 07:23:06.513273 WordPress WPAMS plugin <= 44.0 - Local File Inclusion to Privilege Escalation vulnerability
CRITICAL (9.8)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in mojoomla WPAMS apartment-management allows PHP Local File Inclusion.This issue affects WPAMS: from n/a through <= 44.0.
Published: 2025-05-19T19:07:25.329Z
Updated: 2026-04-28T16:12:30.354Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-39405 vulnerable 2026-06-08 07:23:06.512993 WordPress WPAMS plugin <= 44.0 (17-08-2023) - Privilege Escalation vulnerability
HIGH (8.8)
Incorrect Privilege Assignment vulnerability in mojoomla WPAMS apartment-management allows Privilege Escalation.This issue affects WPAMS: from n/a through <= 44.0 (17-08-2023).
Published: 2025-05-19T19:09:20.995Z
Updated: 2026-04-28T16:12:30.272Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-39403 vulnerable 2026-06-08 07:23:06.510136 WordPress WPAMS plugin <= 44.0 (17-08-2023) - SQL Injection vulnerability
HIGH (8.5)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mojoomla WPAMS apartment-management allows SQL Injection.This issue affects WPAMS: from n/a through <= 44.0 (17-08-2023).
Published: 2025-05-19T19:10:31.919Z
Updated: 2026-04-28T16:12:30.183Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-39402 vulnerable 2026-06-08 07:23:06.509754 WordPress WPAMS plugin <= 44.0 (17-08-2023) - Arbitrary File Upload vulnerability
CRITICAL (9.9)
Unrestricted Upload of File with Dangerous Type vulnerability in mojoomla WPAMS apartment-management allows Upload a Web Shell to a Web Server.This issue affects WPAMS: from n/a through <= 44.0 (17-08-2023).
Published: 2025-05-19T19:24:47.800Z
Updated: 2026-04-28T16:12:30.150Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-39401 vulnerable 2026-06-08 07:23:06.509465 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-39395 vulnerable 2026-06-08 07:23:06.499045 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-39392 vulnerable 2026-06-08 07:23:06.498100 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.