CVE-2026-113615
GS JWT Authentication <= 1.0.0 - Unauthenticated Privilege Escalation via SQLi
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The GS JWT Authentication for WP REST API WordPress plugin through 1.0.0 does not sanitize or parameterize a request value before using it in SQL queries on several unauthenticated REST routes, allowing unauthenticated attackers to perform SQL injection and obtain an administrator session.
| Vendor | unknown |
| Product | gs jwt authentication for wp rest api |
| Published | Nov 6, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown gs jwt authentication for wp rest api
Be the first to know when new unknown vulnerabilities affecting unknown gs jwt authentication for wp rest api are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / GS JWT Authentication for WP REST API
0 ≤ 1.0.0
References
Credits
Naoki Kawahigashi WPScan