JSON Options vulnerabilities
We track 1 vulnerability in JSON Options products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 20, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest JSON Options vulnerabilities
- 9.8 Critical severity
JSON Options: Improper Privilege Management
The JSON Options WordPress plugin through 0.0.4 does not have any capability check or nonce verification on one of its actions, which runs on every request and is available to unauthenticated users, allowing them to update arbitrary WordPress options. This can