CyberSecBulletin

Parorrey vulnerabilities

We track 2 vulnerabilities in Parorrey products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 2, 2026.

2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score

Latest Parorrey vulnerabilities

  • 9.8 Critical severity

    JSON API Auth: Improper Authentication

    CVE-2026-97637Parorrey

    The JSON API Auth plugin for WordPress is vulnerable to Authentication Bypass via Cached Session Cookie Disclosure in all versions up to, and including, 3.1.2. The vulnerability exists because the required PI-Media/json-api parent plugin caches controller disp

  • 9.8 Critical severity

    JSON API User: Improper Privilege Management

    CVE-2024-6624ParorreyEPSS 2.87%

    The JSON API User plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.9.3. This is due to improper controls on custom user meta fields. This makes it possible for unauthenticated attackers to register as administr