← Back

Parorrey

parorrey

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Json Api User
json_api_user
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-6624
1Parorrey
1Json Api User
Apr 8, 2026
Jul 11, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
The JSON API User plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.9.3. This is due to improper controls on custom user meta fields. This makes it possible for unauthenti...Show more
The JSON API User plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.9.3. This is due to improper controls on custom user meta fields. This makes it possible for unauthenticated attackers to register as administrators on the site. The plugin requires the JSON API plugin to also be installed.Show less