parorrey
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| JSON API User | 2 | – | Jul 3, 2026 |
| JSON API Auth | 1 | – | Oct 2, 2026 |
Exploited and recent CVEs
- CVE-2026-97637 JSON API Auth <= 3.1.2 - Unauthenticated Authentication Bypass via Cached 'generate_auth_cookie' Response 0.6%
- CVE-2026-9626 JSON API User <= 4.1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'content' Parameter 0.4%
- CVE-2024-6624 JSON API User <= 3.9.3 - Unauthenticated Privilege Escalation 2.9%