gs_jwt_authentication_for_wp_rest_api vulnerabilities

CVEs whose affected-version data names the gs_jwt_authentication_for_wp_rest_api package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-113615Critical· 9.8PoC

yesterday

GS JWT Authentication <= 1.0.0 - Unauthenticated Privilege Escalation via SQLi

The GS JWT Authentication for WP REST API WordPress plugin through 1.0.0 does not sanitize or parameterize a request value before using it in SQL queries on several unauthenticated REST routes, allowing unauthenticated attackers to perfo…

▾ AbyssalEPSS 0.53%via CVEORG