Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:gs_jwt_project:gs_jwt:*:*:*:*:*:wordpress:*:*

1 brief RSS
critical advisory

GS JWT: Unauthenticated SQL injection and admin JWT forgery (CVE-2026-113615)

An unauthenticated SQL injection vulnerability in the GS JWT WordPress plugin allows attackers to forge administrator JWTs and create persistent administrative accounts.

GS JWT wordpress sqli jwt authentication-bypass remote-code-execution
1r 3t 1c