https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T12:08:49.203546+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-286890 EUVD-2026-286890 2026-10-02T12:08:49.251197+00:00 EUVD-2026-286890 https://cve.radiocsirt.org/vuln/fkie_cve-2024-6624 fkie_cve-2024-6624 2026-10-02T12:08:49.251252+00:00

The JSON API User plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.9.3. This is due to improper controls on custom user meta fields. This makes it possible for unauthenticated attackers to register as administrators on the site. The plugin requires the JSON API plugin to also be installed.

 https://cve.radiocsirt.org/vuln/ghsa-mxf2-3xcv-2mf9 GHSA-mxf2-3xcv-2mf9 2026-10-02T12:08:49.251286+00:00

The JSON API User plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.9.3. This is due to improper controls on custom user meta fields. This makes it possible for unauthenticated attackers to register as administrators on the site. The plugin requires the JSON API plugin to also be installed.