Rest Api to Miniprogram
Xjb · 4 CVEs
CVE-2026-3460
MEDIUM
REST API TO MiniProgram <= 5.1.2 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'userid' REST API P…
Mar 21, 2026
CVE-2025-28886
MEDIUM
WordPress REST API TO MiniProgram plugin <= 5.1.2 - Cross Site Request Forgery (CSRF) vulnerability
Mar 11, 2025
CVE-2024-8485
CRITICAL
REST API TO MiniProgram <= 4.7.1 - Unauthenticated Arbitrary User Email Update and Privilege Escalation via Account Tak…
Sep 25, 2024
CVE-2024-8484
HIGH
REST API TO MiniProgram <= 4.7.1 - Unauthenticated SQL Injection
Sep 25, 2024
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-3460 | REST API TO MiniProgram <= 5.1.2 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'userid' REST API Parameter | MEDIUM | 0.44% | Mar 21, 2026 |
| CVE-2025-28886 | WordPress REST API TO MiniProgram plugin <= 5.1.2 - Cross Site Request Forgery (CSRF) vulnerability | MEDIUM | 0.17% | Mar 11, 2025 |
| CVE-2024-8485 | REST API TO MiniProgram <= 4.7.1 - Unauthenticated Arbitrary User Email Update and Privilege Escalation via Account Takeover | CRITICAL | 0.59% | Sep 25, 2024 |
| CVE-2024-8484 | REST API TO MiniProgram <= 4.7.1 - Unauthenticated SQL Injection | HIGH | 3.76% | Sep 25, 2024 |
Showing 1 to 4 of 4 CVEs