Simple Jwt Login Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Simple Jwt Login Project records in CISA KEV

No Simple Jwt Login Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Simple Jwt Login 2 records LOW

Records

2 records in Simple Jwt Login · all components

TI-2021-07086 CVE-2021-24804 · GHSA-vff3-qp7x-xm37

Simple JWT Login < 3.2.1 - Arbitrary Settings Update to Site Takeover via CSRF

LOW 39

The Simple JWT Login WordPress plugin before 3.2.1 does not have nonce checks when saving its settings, allowing attackers to make a logged in admin changed them.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00632 Published 2021-11-17 Fixed in 3.2.1 CWE-352

TI-2021-07276 CVE-2021-24998 · GHSA-96g6-83p3-m784

Simple JWT Login < 3.3.0 - Insecure Password Creation

LOW 35

The Simple JWT Login WordPress plugin before 3.3.0 can be used to create new WordPress user accounts with a randomly generated password.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01226 Published 2021-12-27 Fixed in 3.3.0 CWE-330

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0