Simple JWT Login vulnerabilities
We track 1 vulnerability in Simple JWT Login products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 16, 2026.
1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score
Latest Simple JWT Login vulnerabilities
- 9.1 Critical severity
Simple JWT Login: Improper Authentication
The Simple JWT Login WordPress plugin before 3.6.8 does not validate the audience of the Google identity tokens it accepts, allowing unauthenticated users to authenticate as any user whose email address such a token carries, up to and including an administrato