PA
Vendor
parorrey
3
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-97637 | JA JSON API Auth parorrey | 9.8 | Oct 2 | JSON API Auth <= 3.1.2 - Unauthenticated Authentication Bypass via Cached 'generate_auth_cookie' Response |
| CVE-2026-9626 | JA JSON API User parorrey | 6.4 | Jul 3 | JSON API User <= 4.1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'content' Parameter |
| CVE-2024-6624 | JA Json Api User Parorrey | 9.8 | Jul 11 | The JSON API User plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.9.3 |
