{"id":"CVE-2026-39793","published":"2026-10-06T09:17:52.237","lastModified":"2026-10-06T15:04:25.990","description":"Subscriber Broken Authentication in Simple JWT Login 4.0.0 versions.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-288"],"vendors":[],"products":[],"references":[{"url":"https://patchstack.com/database/wordpress/plugin/simple-jwt-login/vulnerability/wordpress-simple-jwt-login-plugin-4-0-0-broken-authentication-vulnerability?_s_id=cve","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The flaw allows attackers to bypass authentication mechanisms in Simple JWT Login 4.0.0 versions, posing a significant security risk.","exploitability":"Exploitation requires access to the authentication process, which could be relatively easy if the attacker can intercept or manipulate JWT tokens.","blast_radius":"If exploited, this flaw could lead to unauthorized access to protected resources, potentially compromising sensitive data and system integrity.","remediation":"Upgrade to Simple JWT Login 4.1.0 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["auth-bypass","jwt","web"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-07T08:44:20.970Z"}}