CVE-2026-14262 | nicu_m Simple JWT Login Plugin up to 3.6.6 on WordPress auth payload injection

July 11, 2026 Yanac

A vulnerability was found in nicu_m Simple JWT Login Plugin up to 3.6.6 on WordPress and classified as critical. This impacts an unknown function of the file /wp-json/simple-jwt-login/v1/auth of the component Login. Such manipulation of the argument payload leads to injection.

This vulnerability is listed as CVE-2026-14262. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More