CVE-2024-6624

CVE-2024-6624 affects JSON API User (WordPress) up to v3.9.3, enabling unauthenticated privilege escalation due to improper handling of custom user meta. Exploit activity exists: GitHub exploits show unauthenticated admin registration; Wordfence notes the entry is patched. Affected plugin require...