WordPress Plugin Vulnerabilities

JSON REST API 1.1 - JSONP SOP Bypass

Description

The json-rest-api WordPress plugin was affected by a JSONP SOP Bypass security vulnerability.

Affects Plugins

Plugin icon
json-rest-api
Fixed in 1.1.1

References

URL
https://make.wordpress.org/core/2014/07/26/json-rest-api-version-1-1-1-security-release/
URL
http://wp-api.org/

Miscellaneous

Submitter
admin
Verified
No
WPVDB ID
518bd1c5-4add-4032-b400-504e48a3c6c9

Timeline

Publicly Published
2014-06-26 (about 11 years ago)
Added
2014-09-17 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2017-01-11
Title
WordPress 4.7 - User Information Disclosure via REST API
Published
2017-03-13
Title
Dtracker <= 1.5 - Unauthorised Contract Creation
Published
2022-11-29
Title
Appointment Hour Booking < 1.3.73 - CAPTCHA Bypass
Published
2015-07-13
Title
CP Image Store with Slideshow <= 1.0.6 - Purchase ID Brute Force Prevention
Published
2020-01-27
Title
WPS Hide Login < 1.5.5 - Secret Login Page Disclosure