CyberSecBulletin

Jayarsiech vulnerabilities

We track 3 vulnerabilities in Jayarsiech products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on February 8, 2026.

3vulnerabilities
2critical
1high
0exploited
9.5average CVSS score

Latest Jayarsiech vulnerabilities

  • 8.8 High severity

    JAY Login & Register: Improper Privilege Management

    CVE-2025-15100Jayarsiech

    The JAY Login & Register plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.6.03. This is due to the plugin allowing a user to update arbitrary user meta through the 'jay_panel_ajax_update_profile' function. This

  • 9.8 Critical severity

    JAY Login & Register: Improper Privilege Management

    CVE-2025-15027Jayarsiech

    The JAY Login & Register plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.6.03. This is due to the plugin allowing a user to update arbitrary user meta through the 'jay_login_register_ajax_create_final_user' fu

  • 9.8 Critical severity

    JAY Login & Register: Reliance on Cookies without Validation and Integrity Checking

    CVE-2025-14440Jayarsiech

    The JAY Login & Register plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.4.01. This is due to incorrect authentication checking in the 'jay_login_register_process_switch_back' function with the 'jay_login_registe