Skip to content
Threat Feed
Subscribe

Product

GS JWT (WordPress Plugin)

1 brief RSS
critical advisory

GS JWT: Unauthenticated SQL injection and admin JWT forgery (CVE-2026-113615)

An unauthenticated SQL injection vulnerability in the GS JWT WordPress plugin allows attackers to forge administrator JWTs and create persistent administrative accounts.

GS JWT wordpress sqli jwt authentication-bypass remote-code-execution
1r 3t 1c