WordPress - Json Options - CRITICAL - CVE-2026-75860. The JSON Options WordPress plugin prior to version 0.0.4 contains a significant security flaw that lacks proper capability checks and nonce verification. This oversight permits unauthenticated users to trigger actions that alter arbitrary WordPress options on every request. By exploiting this vulnerability, attackers can enable user registration and assign the default role as administrator, ultimately allowing them to gain full control over the WordPress site. BADGES: 👾 EXPLOITED | 🟡 PoC | SecurityVulnerability.io