plugin

Json Options Vulnerabilities

1 known security issue reported for the Json Options WordPress plugin. Most recent disclosed Aug 21, 2026.

1 critical

Running Json Options on your site? Check whether your installed version is affected.

JSON Options <= 0.0.4 - Unauthenticated Remote Code Execution

critical

The JSON Options plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 0.0.4. This is due to insufficient validation of user supplied input before it is executed. This makes it possible for unauthenticated attackers to execute arbitrary code on the server.

CVSS:: 9.8
Affected:: up to 0.0.4
Fix:: No patched version reported
Disclosed:: Aug 21, 2026

CVE-2026-75860 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database