CVE-2026-39793: WordPress Simple JWT Login plugin 4.0.0 - Broken Authentication vulnerability

Published Oct 6, 2026

Updated

Subscriber Broken Authentication in Simple JWT Login 4.0.0 versions.

Affected Software

1 affected component

Simple JWT Login Simple JWT Login=4.0.0

Event History

Oct 6, 2026

CVE Published

via MITRE·08:34 AM

Data Sourced

via MITRE·08:34 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·09:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The CVSS vector indicates that an attacker needs low-level privileges and network access. No user interaction is required, and exploitation is rated as low complexity.

What is the potential impact if the issue is exploited?

The vulnerability is rated high severity with high impacts to confidentiality, integrity, and availability. An attacker who successfully exploits it could affect all three security properties.

Which deployments are identified as affected?

The provided information identifies Simple JWT Login version 4.0.0 as affected. It does not provide information about earlier or later versions, default configuration exposure, or available mitigations.

CVE-2026-39793: WordPress Simple JWT Login plugin 4.0.0 - Broken Authentication vulnerability

Affected Software

Event History

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What is the potential impact if the issue is exploited?

Which deployments are identified as affected?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What is the potential impact if the issue is exploited?

Which deployments are identified as affected?