parorrey

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

parorrey records in CISA KEV

No parorrey vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Json Api User · all components

TI-2024-06142 CVE-2024-6624 · GHSA-mxf2-3xcv-2mf9

MEDIUM 54

The JSON API User plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.9.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0287 Published 2024-07-11 No fix listed CWE-269