Read the docs

Jianbo

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Jianbo records in CISA KEV

No Jianbo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Rest Api To Miniprogram 2 records MEDIUM

Records

2 records in Rest Api To Miniprogram · all components

TI-2024-07867 CVE-2024-8485 · GHSA-563f-r8fh-rrgc

Authorization bypass in xjb REST API TO MiniProgram

Priority MEDIUM 50

The REST API TO MiniProgram plugin for WordPress is vulnerable to privilege escalation via account takeovr in all versions up to, and including, 4.7.1 via the updateUserInfo() due to missing validation on the 'openid' us…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0059 Published 2024-09-25 No fix listed CWE-639
TI-2024-07866 CVE-2024-8484 · GHSA-3xm5-r3mx-685g

REST API TO MiniProgram <= 4.7.1 - Unauthenticated SQL Injection

Priority MEDIUM 45

The REST API TO MiniProgram plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the /wp-json/watch-life-net/v1/comment/getcomments REST API endpoint in all versions up to, and including, 4.7.…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03761 Published 2024-09-25 No fix listed CWE-89
Open these records in search →