JWT Auth vulnerabilities
We track 1 vulnerability in JWT Auth products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 9, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest JWT Auth vulnerabilities
- 7.5 High severity
The JWT Auth WordPress plugin through 3.0.2 does not invalidate previously issued refresh…
The JWT Auth WordPress plugin through 3.0.2 does not invalidate previously issued refresh tokens when a user changes or resets their password or removes a connected device, allowing an attacker who obtained a refresh token before such an event to keep issuing