Threats tagged 'ghsa-j56r-3rjm-35f7'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	4.3	CVE-2025-12822The WP Login and Register using JWT plugin for WordPress is vulnerable to unauthorized access of data due to a missing Medium4.32025-11-19GCVE DatabaseCVE-2025-12822 The WP Login and Register using JWT plugin for WordPress contains a vulnerability in all versions up to and including 3.0.0. This flaw arises from a missing capability check in the 'mo_jwt_generate_new_api_key' function, allowing authenticated users with Subscriber-level access or higher to generate a new API key if the site does not already have one configured. This unauthorized API key generation can enable access to restricted endpoints. Report on CVE-2025-12822 Vulnerability CWE-862 #ghsa-j56r-3rjm-35f7	GCVE Database	2025-11-19

Page 1 of 1