📦 Simple Jwt Login

The Simple JWT Login WordPress plugin before version 3.3.0 uses PHP's str_shuffle function to generate passwords for new user accounts, which creates predictable, non-cryptographically secure password...

This vulnerability in the Simple JWT Login WordPress plugin allows attackers to change plugin settings without proper authentication checks. Attackers can modify critical settings like HMAC verificati...