Detections
Analytics
CVE-2026-113615
critical
Description
The GS JWT Authentication for WP REST API WordPress plugin through 1.0.0 does not sanitize or parameterize a request value before using it in SQL queries on several unauthenticated REST routes, allowing unauthenticated attackers to perform SQL injection and obtain an administrator session.
References
https://wpscan.com/vulnerability/40e0b8d1-8e13-4c4c-a09a-9ec07c578662/