CVE-2026-97637

{
  "etk_id": "ETK-2026-317",
  "cve_id": "CVE-2026-97637",
  "display_id": "CVE-2026-97637",
  "ghsa_id": "GHSA-pmrp-gw7x-5x4r",
  "euvd_id": "EUVD-2026-91259",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Authentication bypass in JSON API Auth for WordPress",
  "summary": "JSON API Auth versions through 3.1.2 can expose a cached administrator authentication response through its JSON API integration. An unauthenticated attacker may obtain an administrator session and act as that user when the required parent plugin and Auth controller are enabled and a recent administrator authentication request is still cached.",
  "mitigation": "Disable the Auth controller or the required JSON API parent plugin until a corrected release is available. Restrict unauthenticated access to the affected API and purge relevant cached entries to reduce exposure.",
  "vendor": "parorrey",
  "product": "JSON API Auth",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, <= 3.1.2"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "JSON API Auth",
      "purl": null
    }
  ],
  "cwes": [
    287
  ],
  "cvss_score": 9.8,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "epss_score": 0.0064,
  "epss_percentile": 0.4958,
  "epss_asof": "2026-10-20",
  "automation": "deterministic",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 159.70434693333334,
  "t0_at": "2026-10-02T07:39:29.363000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-02T07:39:29.363000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-02T07:39:29.363000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-97637"
    }
  }
}