Known Vulnerabilities for JSON API Auth by Parorrey
Listed below are 10 of the newest known vulnerabilities associated with "JSON API Auth" by "Parorrey".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-100696 json | Adminer 4.16.0 through 6.0.1 contain a pre-authentication Server-Side Request Forgery (SSRF) vulnerability in the optional El... | Not Provided | 2026-09-26 | 2026-09-28 |
| CVE-2026-97637 json | The JSON API Auth plugin for WordPress is vulnerable to Authentication Bypass via Cached Session Cookie Disclosure in all ver... | Not Provided | 2026-10-02 | 2026-10-02 |
| CVE-2026-85175 json | SiYuan versions <= 3.8.1 (fixed in v3.8.2) contain an incomplete blocklist in the IsForbiddenAbsPath() function (kernel/util/... | Not Provided | 2026-09-03 | 2026-09-03 |
| CVE-2026-82020 json | Hermes Agent 0.16.0 prior to 0.17.0 contains an improper path restriction vulnerability that allows attackers who can influen... | Not Provided | 2026-08-28 | 2026-09-01 |
| CVE-2026-66902 json | Google::Auth versions before 0.06 for Perl run a command named in an external_account credentials JSON via an ungated system ... | Not Provided | 2026-08-04 | 2026-08-05 |
| CVE-2026-66901 json | Google::Auth versions before 0.09 for Perl allow server side request forgery and credential exfiltration via unvalidated URLs... | Not Provided | 2026-08-04 | 2026-08-05 |
| CVE-2026-66012 json | SiYuan before v3.7.2 contains a missing authorization vulnerability in the POST /mcp kernel endpoint, which is gated only by ... | Not Provided | 2026-07-25 | 2026-09-17 |
| CVE-2026-58122 json | Hermes WebUI before 0.51.307 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to ... | Not Provided | 2026-07-09 | 2026-07-14 |
| CVE-2026-55177 json | CloudTAK is a browser-based Common Operating Picture and situational awareness tool compatible with TAK. Prior to version 13.... | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-53728 json | Medplum is a developer platform that enables development of healthcare apps. Prior to version 5.1.6, the external identity pr... | Not Provided | 2026-09-03 | 2026-09-09 |