Parorrey JSON API User
2 CVEs affecting Parorrey JSON API User. Latest disclosed: 2026-07-03. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-6624 | Critical | 9.8 | 2024-07-11 | The JSON API User plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.9.3. This is due to improper controls on c… |
CVE-2026-9626 | Medium | 6.4 | 2026-07-03 | The JSON API User plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter of the post_comment API endpoint in versions up… |