Skip to content
Threat Feed
Subscribe

Product

JSON API Auth (<= 3.1.2)

1 brief RSS
critical threat

Authentication Bypass in WordPress JSON API Auth Plugin (CVE-2026-97637)

An authentication bypass vulnerability in the WordPress JSON API Auth plugin allows unauthenticated attackers to hijack administrative sessions via cached HTTP responses.

exploited JSON API Auth wordpress web-application authentication-bypass cve
1r 1t 1c