Extension WordPress
Vulnérabilités JAY Login & Register
Cette page rassemble les failles publiées pour JAY Login & Register, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de JAY Login & Register
3 fiches
JAY Login & Register <= 2.6.03 – Authenticated (Subscriber+) Privilege Escalation via jay_panel_ajax_update_profile
The JAY Login & Register plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.6.03. This is due to the plugin allowing a user to update arbitrary user meta through the 'jay_panel_ajax_update_profile'…
*-2.6.03
2.6.04
07/02/2026
JAY Login & Register <= 2.6.03 – Unauthenticated Privilege Escalation via jay_login_register_ajax_create_final_user
The JAY Login & Register plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.6.03. This is due to the plugin allowing a user to update arbitrary user meta through the 'jay_login_register_ajax_create_final_user'…
*-2.6.03
2.6.04
07/02/2026
JAY Login & Register <= 2.4.01 – Authentication Bypass via Cookie
The JAY Login & Register plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.4.01. This is due to incorrect authentication checking in the 'jay_login_register_process_switch_back' function with the 'jay_login_register_process_switch_back' cookie value. This makes…
*-2.4.01
2.5.01
12/12/2025
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.