Unrated severityNVD Advisory· Published Nov 6, 2026
CVE-2026-113615
CVE-2026-113615
Description
The GS JWT Authentication for WP REST API WordPress plugin through 1.0.0 does not sanitize or parameterize a request value before using it in SQL queries on several unauthenticated REST routes, allowing unauthenticated attackers to perform SQL injection and obtain an administrator session.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <=1.0.0
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.