Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

parorrey vulnerabilities

3 published CVEs name parorrey among the affected products.

All 3 in the listAtom feed of new CVEs
Published CVEs
3
Last 12 months
2
Critical
2
Known exploited
0

Critical 2High 0Medium 1Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20241
  2. 20262

Newest CVEs

  • CVE-2026-97637

    JSON API Auth <= 3.1.2 - Unauthenticated Authentication Bypass via Cached 'generate_auth_cookie' Response

    parorrey · JSON API Auth

    Critical9.8
  • CVE-2026-9626

    JSON API User <= 4.1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'content' Parameter

    parorrey · JSON API User

    Medium6.4
  • CVE-2024-6624

    JSON API User <= 3.9.3 - Unauthenticated Privilege Escalation

    parorrey · JSON API User

    Critical9.8

Products with the most CVEs

  1. JSON API User2
  2. JSON API Auth1

Most common weaknesses

  1. CWE-269 Improper privilege management1
  2. CWE-287 Improper authentication1
  3. CWE-79 Cross-site scripting (XSS)1