cbcvebase.

Parorrey Json Api Auth vulnerabilities

1 known vulnerability affecting parorrey/json_api_auth.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2026-97637P2CRITICALCVSS 9.8≤ 3.1.22026-10-02
CVE-2026-97637 [CRITICAL] CWE-287 CVE-2026-97637: The JSON API Auth plugin for WordPress is vulnerable to Authentication Bypass via Cached Session Coo The JSON API Auth plugin for WordPress is vulnerable to Authentication Bypass via Cached Session Cookie Disclosure in all versions up to, and including, 3.1.2. The vulnerability exists because the required PI-Media/json-api parent plugin caches controller dispatch results in transients keyed solely by URI and query string, ignoring HTTP method and
nvd