Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 19:21:26 +0000 CVE-2024-6624 — JSON API User <= 3.9.3 - Unauthenticated Privilege Escalation https://cve.radiocsirt.org/vuln/cve-2024-6624 <p><strong>Affected:</strong> parorrey JSON API User, parorrey json_api_user</p> <p>The JSON API User plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.9.3. This is due to improper controls on custom user meta fields. This makes it possible for unauthenticated attackers to register as administrators on the site. The plugin requires the JSON API plugin to also be installed.</p> <p><strong>Affected:</strong> parorrey JSON API User, parorrey json_api_user</p> <p>The JSON API User plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.9.3. This is due to improper controls on custom user meta fields. This makes it possible for unauthenticated attackers to register as administrators on the site. The plugin requires the JSON API plugin to also be installed.</p> https://cve.radiocsirt.org/vuln/cve-2024-6624