CVE-2026-113615
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Nov 06, 2026
Vendor
unknown
Description
The GS JWT Authentication for WP REST API WordPress plugin through 1.0.0 does not sanitize or parameterize a request value before using it in SQL queries on several unauthenticated REST routes, allowing unauthenticated attackers to perform SQL injection and obtain an administrator session.