ChamaWP vulnerabilities
We track 2 vulnerabilities in ChamaWP products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 3, 2026.
2vulnerabilities
1critical
1high
0exploited
8.9average CVSS score
Latest ChamaWP vulnerabilities
- 9.8 Critical severity
ChamaWP: Missing Authorization
The ChamaWP WordPress plugin before 1.0.13 does not properly validate a password reset request, allowing unauthenticated attackers to reset the password of arbitrary users, including administrators, which could lead to a full site takeover.
- 8.1 High severity
ChamaWP: Deserialization of Untrusted Data
The ChamaWP WordPress plugin before 1.0.13 does not properly validate user input before passing it to a PHP deserialization function, allowing unauthenticated attackers to inject arbitrary PHP objects, which could lead to remote code execution when a suitable