GS JWT Authentication for WP REST API vulnerabilities
We track 1 vulnerability in GS JWT Authentication for WP REST API products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 6, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest GS JWT Authentication for WP REST API vulnerabilities
- 9.8 Critical severity
GS JWT Authentication for WP REST API: Improper Privilege Management
The GS JWT Authentication for WP REST API WordPress plugin through 1.0.0 does not sanitize or parameterize a request value before using it in SQL queries on several unauthenticated REST routes, allowing unauthenticated attackers to perform SQL injection and ob