Skip to content
OpenAdvisories

Product · parorrey

JSON API User

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2024-6624 Public exploit

    JSON API User <= 3.9.3 - Unauthenticated Privilege Escalation

    The JSON API User plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.9.3. This is due to improper controls on custom user meta fields. This makes it possible for unauthenticated attackers to register as administ…

    parorrey JSON API User Web / CMS