CVE-2026-113615

{
  "etk_id": "ETK-2026-3701",
  "cve_id": "CVE-2026-113615",
  "display_id": "CVE-2026-113615",
  "ghsa_id": "GHSA-rgfv-fwf2-4544",
  "euvd_id": "EUVD-2026-117910",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Unauthenticated SQL injection in GS JWT Authentication for WP REST API",
  "summary": "GS JWT Authentication for WP REST API versions through 1.0.0 are affected by SQL injection in public REST API routes. An unauthenticated remote attacker may manipulate database queries and obtain an administrator session when the plugin is enabled and those routes are reachable.",
  "mitigation": "Disable the plugin or restrict public access to its affected REST API routes until a corrected vendor release is available. No fixed version is recorded in the advisory.",
  "vendor": null,
  "product": "GS JWT Authentication for WP REST API",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, <= 1.0.0"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "GS JWT Authentication for WP REST API",
      "purl": null
    }
  ],
  "cwes": [
    269
  ],
  "cvss_score": 9.8,
  "cvss_src": "nvd",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "epss_score": 0.0025,
  "epss_percentile": 0.1596,
  "epss_asof": "2026-11-06",
  "automation": "deterministic",
  "check": true,
  "check_confidence_basis": "upstream",
  "exploit": false,
  "pipeline_minutes": 0.035262883333333335,
  "t0_at": "2026-11-06T06:00:27.462000+00:00",
  "signals": {
    "check": {
      "at": "2026-11-06T19:19:04.283226+00:00",
      "days": 0.5545928382638889,
      "is_lower_bound": false,
      "measured_at": "2026-11-06T06:00:27.462000+00:00",
      "url": null
    },
    "public_poc": {
      "at": "2026-11-06T16:11:32+00:00",
      "days": 0.4243580787037037,
      "is_lower_bound": false,
      "measured_at": "2026-11-06T06:00:27.462000+00:00",
      "url": "https://github.com/thiscitze/cve-2026-113615-poc"
    },
    "trigger_signal": {
      "at": "2026-11-06T06:00:27.462000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-06T06:00:27.462000+00:00",
      "url": "https://github.com/advisories/GHSA-rgfv-fwf2-4544"
    }
  }
}