WordPress plugin
JNews - Pay Writer security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High2
- Medium0
- Low0
All JNews - Pay Writer vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.5 | Pay Writer <= 12.0.1 - Unauthenticated SQL Injection ≤12.0.1Update to 12.0.2 | CVE-2026-96328 | |
| High7.5 | Pay Writer <= 11.0.0 - Authenticated (Subscriber+) Local File Inclusion ≤11.0.0No patch available | CVE-2025-68905 |
- High7.5Pay Writer <= 12.0.1 - Unauthenticated SQL Injection
≤12.0.1Update to 12.0.2
- High7.5Pay Writer <= 11.0.0 - Authenticated (Subscriber+) Local File Inclusion
≤11.0.0No patch available
JNews - Pay Writer: common questions
Does JNews - Pay Writer have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in JNews - Pay Writer: 2 high. At least one is not fixed in the latest version.
How do I check which version of JNews - Pay Writer I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent JNews - Pay Writer vulnerability?
CVE-2026-96328, published Oct 3, 2026: JNews - Pay Writer <= 12.0.1 - Unauthenticated SQL Injection. Severity: High (CVSS 7.5).
Is any JNews - Pay Writer vulnerability listed in CISA KEV?
No. None of the known JNews - Pay Writer vulnerabilities is currently listed in the CISA KEV catalog.