GS JWT Authentication WordPress plugin SQL injection allows administrator takeover
Anyone can gain administrator access through a WordPress login plugin!
Summary
The GS JWT Authentication for WP REST API plugin does not sanitize a request value on several REST routes, so unauthenticated attackers can use SQL injection to obtain an administrator session. Version 1.0.0 and older are affected.
What to do
No known fix. Check that the plugin runs a version newer than 1.0.0 and read the vendor's advisory.
Products and platforms
CVE IDs
Sources
- Write-up: wpscan.com (opens in a new tab)
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen