Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:wordpress:json_api_auth:*:*:*:*:*:*:*:*

1 brief RSS
critical threat

Authentication Bypass in WordPress JSON API Auth Plugin (CVE-2026-97637)

An authentication bypass vulnerability in the WordPress JSON API Auth plugin allows unauthenticated attackers to hijack administrative sessions via cached HTTP responses.

exploited JSON API Auth wordpress web-application authentication-bypass cve
1r 1t 1c