WordPress Plugin Vulnerabilities

JSON API User < 3.9.4 - Unauthenticated Privilege Escalation

Description

The JSON API User plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.9.3. This is due to improper controls on custom user meta fields. This makes it possible for unauthenticated attackers to register as administrators on the site. The plugin requires the JSON API plugin to also be installed.

Affects Plugins

Plugin icon
json-api-user
Fixed in 3.9.4

References

CVE
CVE-2024-6624
URL
https://www.wordfence.com/threat-intel/vulnerabilities/id/a4a26f60-5912-4d4a-8ef8-e4357c1fb1ff

Classification

Type
PRIVESC
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-269
CVSS
9.8 (critical)

Miscellaneous

Original Researcher
Thanh Nam Tran
Verified
No
WPVDB ID
c4628fb7-73bd-4599-85d8-77a4bee273dd

Timeline

Publicly Published
2024-07-10 (about 2 years ago)
Added
2024-07-10 (about 2 years ago)
Last Updated
2024-07-29 (about 2 years ago)

Other

Published
Title
Published
2024-10-24
Title
App Builder – Create Native Android & iOS Apps On The Flight < 5.3.8 - Privilege Escalation and Account Takeover via Weak OTP
Published
2020-04-28
Title
LearnPress < 3.2.6.9 - Privilege Escalation to "LP Instructor"
Published
2025-05-19
Title
CouponXL <= 4.5.0 - Unauthenticated Privilege Escalation
Published
2024-09-10
Title
Post Grid and Gutenberg Blocks 2.2.87 - 2.2.90 - Subscriber+ Privilege Escalation
Published
2026-08-04
Title
Membership Plugin – Kadence Memberships < 4.0.1 - Unauthenticated Password Reset Link Poisoning to Account Takeover