Read the docs

parorrey

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

parorrey records in CISA KEV

No parorrey vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Json Api User 1 record MEDIUM

Records

3 records

TI-2024-06142 CVE-2024-6624 · GHSA-mxf2-3xcv-2mf9

JSON API User <= 3.9.3 - Unauthenticated Privilege Escalation

Priority MEDIUM 54

The JSON API User plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.9.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0287 Published 2024-07-11 No fix listed CWE-269
TI-2026-08455 CVE-2026-9626 · GHSA-4689-rgvq-62r3

JSON API User <= 4.1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'content' Parameter

Priority LOW 29

The JSON API User plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter of the post_comment API endpoint in versions up to, and including, 4.1.0 This is due to insufficient input s…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00375 Published 2026-07-03 No fix listed CWE-79
Open these records in search →