WordPress plugin
Simple JWT Login – Allows you to use JWT on REST endpoints. security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High4
- Medium2
- Low0
All Simple JWT Login – Allows you to use JWT on REST endpoints. vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Missing Authorization 4.0.0 – 4.0.0No patch available | CVE-2026-39793 | |
| High7.3 | Unauthenticated Privilege Escalation <3.6.8Update to 3.6.8 | CVE-2026-19714 | |
| High8.8 | Authenticated (Subscriber+) Authentication Bypass to Privilege Escalation via 'payload' Parameter ≤3.6.6Update to 3.6.7 | CVE-2026-14262 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤3.6.4Update to 3.6.5 | CVE-2025-58648 | |
| High8.8 | Cross-Site Request Forgery <3.2.1Update to 3.2.1 | CVE-2021-24804 | |
| High7.5 | Insecure Password Creation <3.3.0Update to 3.3.0 | CVE-2021-24998 |
- Medium4.3Missing Authorization
4.0.0 – 4.0.0No patch available
- High7.3Unauthenticated Privilege Escalation
<3.6.8Update to 3.6.8
- High8.8Authenticated (Subscriber+) Authentication Bypass to Privilege Escalation via 'payload' Parameter
≤3.6.6Update to 3.6.7
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤3.6.4Update to 3.6.5
- High8.8Cross-Site Request Forgery
<3.2.1Update to 3.2.1
- High7.5Insecure Password Creation
<3.3.0Update to 3.3.0
Simple JWT Login – Allows you to use JWT on REST endpoints.: common questions
Does Simple JWT Login – Allows you to use JWT on REST endpoints. have known vulnerabilities?
Yes. VulnCrest Radar lists 6 known vulnerabilities in Simple JWT Login – Allows you to use JWT on REST endpoints.: 4 high, 2 medium. At least one is not fixed in the latest version.
How do I check which version of Simple JWT Login – Allows you to use JWT on REST endpoints. I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Simple JWT Login – Allows you to use JWT on REST endpoints. vulnerability?
CVE-2026-39793, published Oct 5, 2026: Simple JWT Login – Allows you to use JWT on REST endpoints. 4.0.0 - Missing Authorization. Severity: Medium (CVSS 4.3).
Is any Simple JWT Login – Allows you to use JWT on REST endpoints. vulnerability listed in CISA KEV?
No. None of the known Simple JWT Login – Allows you to use JWT on REST endpoints. vulnerabilities is currently listed in the CISA KEV catalog.