Simple Jwt Login Project Simple Jwt Login
2 CVEs affecting Simple Jwt Login Project Simple Jwt Login. Latest disclosed: 2021-12-27. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-24804 | High | 8.8 | 2021-11-17 | The Simple JWT Login WordPress plugin before 3.2.1 does not have nonce checks when saving its settings, allowing attackers to make a logged in admin changed th… |
CVE-2021-24998 | High | 7.5 | 2021-12-27 | The Simple JWT Login WordPress plugin before 3.3.0 can be used to create new WordPress user accounts with a randomly generated password. The password is genera… |