Threats tagged 'ghsa-rgfv-fwf2-4544'

The GS JWT Authentication for WP REST API WordPress plugin versions through 1.0.0 contains an SQL injection vulnerability due to lack of sanitization or parameterization of request values on several unauthenticated REST routes. This flaw allows unauthenticated attackers to execute SQL injection attacks and potentially obtain an administrator session.