The WordPress plugin called JSON API User has a security issue that allows unauthorized users to gain administrative privileges on the website. This happens because the plugin does not properly control custom user information. This vulnerability exists in all versions up to and including 3.9.3. Please make sure to also have the JSON API plugin installed.
This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!
Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:
> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21
Is this information incorrect? Please leave us a message.
