Plugin icon

JSON API User

json-api-user

Vulnerabilities:

2

Last Updated:

September 7, 2026

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2026-07-02
Title
JSON API User < 4.1.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'content' Parameter
Fixed in
Fixed in 4.1.2
CVSS
6.4 (medium)
Published
2024-07-10
Title
JSON API User < 3.9.4 - Unauthenticated Privilege Escalation
Fixed in
Fixed in 3.9.4
CVSS
9.8 (critical)