by Kastro
Paper/Archive/CVE-2026-113615

CVE-2026-113615

Unknown GS JWT Authentication for WP REST API — GS JWT Authentication <= 1.0.0 - Unauthenticated Privilege Escalation via SQLi

EPSS 0.2%CVSS 9.8
critical.is priorityof 100
33
CVSS 9.8 (ADP)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 16.0.160 × 203.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

The GS JWT Authentication for WP REST API WordPress plugin through 1.0.0 does not sanitize or parameterize a request value before using it in SQL queries on several unauthenticated REST routes, allowing unauthenticated attackers to perform SQL injection and obtain an administrator session.

Affected

ProductAffectedFixed inSource
GS JWT Authentication for WP REST API≤ 1.0.0–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

exploitwpscan.com/vulnerability/40e0b8d1-8e13-4c4c-a09a-9ec07c578662