jwt_authentication_for_wp_rest_apis vulnerabilities

CVEs whose affected-version data names the jwt_authentication_for_wp_rest_apis package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-89027Medium· 6.5

1w ago

miniOrange JWT Authentication for WP REST APIs plugin for WordPress before 4.8.0 contains an authentication method downgrade vulnerability that allows unauthenticated attackers to bypass administrator-configured authentication by supplyi…

miniOrange JWT Authentication for WP REST APIs plugin for WordPress before 4.8.0 contains an authentication method downgrade vulnerability that allows unauthenticated attackers to bypass administrator-configured authentication by supplyi…

▾ SunlitminiOrange · JWT Authentication for WP REST APIsEPSS 0.36%via NVD