Signal is active with 4 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The GS JWT Authentication for WP REST API WordPress plugin through 1.0.0 does not sanitize or parameterize a request value before using it in SQL queries on several unauthenticated REST routes, allowing unauthenticated attackers to perform SQL injection and obtain an administrator session.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
🆕 New CVE GS JWT Authentication for WP REST API: privilege escalation via SQL injection in REST routes (CVE-2026-113615) An unauthenticated attacker can inject SQL through several REST routes to gain an administrator session. No patch listed yet https://cve.now/CVE-2026-113615?utm_source=x&utm_medium=social&utm_campaign=cvedotnow&utm_content=critical
🚨 Update: public exploit code for GS JWT Authentication for WP REST API CVE-2026-113615 is out on GitHub. No patch listed yet https://cve.now/CVE-2026-113615?utm_source=x&utm_medium=social&utm_campaign=cvedotnow&utm_content=exploit
💥 Public exploit released: CVE-2026-113615 (CVSS 9.8, Enclave score 6/10) Unknown GS JWT Authentication for WP REST API · SQL injection Remote, no login needed. The GS JWT Authentication for WP REST API WordPress plugin through 1.0.0 does not sanitize… https://app.enclave.ai/threat-feed/CVE-2026-113615
🆕 New CVE: CVE-2026-113615 (CVSS 9.8, Enclave score 6/10) Unknown GS JWT Authentication for WP REST API · SQL injection Remote, no login needed. The GS JWT Authentication for WP REST API WordPress plugin through 1.0.0 does not sanitize or parameterize… https://app.enclave.ai/threat-feed/CVE-2026-113615