Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-93361
HistoryNov 21, 2021 - 12:00 a.m.

WordPress Simple JWT Login plugin access control error vulnerability

2021-11-2100:00:00
China National Vulnerability Database
www.cnvd.org.cn
10

0.001 Low

EPSS

Percentile

44.2%

WordPress is the WordPress Foundation’s suite of blogging platforms developed using the PHP language. The platform supports the hosting of personal blog sites on servers with PHP and MySQL. WordPress Simple JWT Login plugin has an access control error vulnerability in versions prior to 3.2.1, which stems from a network system or product that does not properly restrict access to resources from unauthorized roles. An attacker could update settings such as HMAC authentication keys, account registration, and default user roles.

0.001 Low

EPSS

Percentile

44.2%