Skip to content
OpenAdvisories

Archive

13 December 2025

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2025-14440 Public exploit

    JAY Login & Register <= 2.4.01 - Authentication Bypass via Cookie

    The JAY Login & Register plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.4.01. This is due to incorrect authentication checking in the 'jay_login_register_process_switch_back' function with the 'jay_login_regist…