Vulnerabilities

TI-2025-13778 CVE-2025-15100 · GHSA-7ggh-xq48-m73m

JAY Login & Register <= 2.6.03 - Authenticated (Subscriber+) Privilege Escalation via jay_panel_ajax_update_profile

MEDIUM 40

The JAY Login & Register plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.6.03.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00347 Published 2026-02-08 No fix listed CWE-269

TI-2025-13710 CVE-2025-15027 · GHSA-q4jc-jqf3-rhwm

MEDIUM 49

The JAY Login & Register plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.6.03.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00457 Published 2026-02-08 No fix listed CWE-269

TI-2025-13189 CVE-2025-14440 · GHSA-7wgv-8jv9-78p4

MEDIUM 50

The JAY Login & Register plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.4.01.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00752 Published 2025-12-13 No fix listed CWE-565