WordPress plugin

Simple JWT Login – Allows you to use JWT on REST endpoints. security & vulnerabilities

Q: Does Simple JWT Login – Allows you to use JWT on REST endpoints. have known vulnerabilities?

Yes. VulnCrest Radar lists 6 known vulnerabilities in Simple JWT Login – Allows you to use JWT on REST endpoints.: 4 high, 2 medium. At least one is not fixed in the latest version.

Q: How do I check which version of Simple JWT Login – Allows you to use JWT on REST endpoints. I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

Q: What is the most recent Simple JWT Login – Allows you to use JWT on REST endpoints. vulnerability?

CVE-2026-39793, published Oct 5, 2026: Simple JWT Login – Allows you to use JWT on REST endpoints. 4.0.0 - Missing Authorization. Severity: Medium (CVSS 4.3).

Q: Is any Simple JWT Login – Allows you to use JWT on REST endpoints. vulnerability listed in CISA KEV?

No. None of the known Simple JWT Login – Allows you to use JWT on REST endpoints. vulnerabilities is currently listed in the CISA KEV catalog.

simple-jwt-login— active installsLast vulnerability Oct 5, 2026

Unpatched vulnerability in the latest version

At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.

Watch plugin

6Known vulnerabilities

Critical0
High4
Medium2
Low0

Vulnerabilities per year

All Simple JWT Login – Allows you to use JWT on REST endpoints. vulnerabilities

Simple JWT Login – Allows you to use JWT on REST endpoints. vulnerabilities
Severity	Vulnerability	CVE	Published
High7.3	Unauthenticated Privilege Escalation <3.6.8Update to 3.6.8	CVE-2026-19714	Aug 20
High8.8	Authenticated (Subscriber+) Authentication Bypass to Privilege Escalation via 'payload' Parameter ≤3.6.6Update to 3.6.7	CVE-2026-14262	Jul 10
High8.8	Cross-Site Request Forgery <3.2.1Update to 3.2.1	CVE-2021-24804	Oct 18, 2021
High7.5	Insecure Password Creation <3.3.0Update to 3.3.0	CVE-2021-24998	Oct 13, 2021

High7.3
Unauthenticated Privilege Escalation
<3.6.8Update to 3.6.8
CVE-2026-19714Aug 20
High8.8
Authenticated (Subscriber+) Authentication Bypass to Privilege Escalation via 'payload' Parameter
≤3.6.6Update to 3.6.7
CVE-2026-14262Jul 10
High8.8
Cross-Site Request Forgery
<3.2.1Update to 3.2.1
CVE-2021-24804Oct 18, 2021
High7.5
Insecure Password Creation
<3.3.0Update to 3.3.0
CVE-2021-24998Oct 13, 2021

Simple JWT Login – Allows you to use JWT on REST endpoints.: common questions

Does Simple JWT Login – Allows you to use JWT on REST endpoints. have known vulnerabilities?

Yes. VulnCrest Radar lists 6 known vulnerabilities in Simple JWT Login – Allows you to use JWT on REST endpoints.: 4 high, 2 medium. At least one is not fixed in the latest version.

How do I check which version of Simple JWT Login – Allows you to use JWT on REST endpoints. I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent Simple JWT Login – Allows you to use JWT on REST endpoints. vulnerability?

CVE-2026-39793, published Oct 5, 2026: Simple JWT Login – Allows you to use JWT on REST endpoints. 4.0.0 - Missing Authorization. Severity: Medium (CVSS 4.3).

Is any Simple JWT Login – Allows you to use JWT on REST endpoints. vulnerability listed in CISA KEV?

No. None of the known Simple JWT Login – Allows you to use JWT on REST endpoints. vulnerabilities is currently listed in the CISA KEV catalog.