Read the docs

jiangqie

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

jiangqie records in CISA KEV

No jiangqie vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Official Website Mini Program 1 record MEDIUM

Records

3 records

TI-2024-32907 CVE-2024-49314 · GHSA-x772-22wg-xfm9

WordPress JiangQie Free Mini Program plugin <= 2.5.2 - Arbitrary File Upload vulnerability

Priority MEDIUM 49

Unrestricted Upload of File with Dangerous Type vulnerability in jiangqie JiangQie Free Mini Program jiangqie-free-mini-program allows Upload a Web Shell to a Web Server.This issue affects JiangQie Free Mini Program: fro…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00511 Published 2024-10-17 No fix listed CWE-434
TI-2021-06595 CVE-2021-24303 · GHSA-pj62-vwgh-4fwm

JiangQie Official Website Mini Program < 1.1.1 - Authenticated SQL Injection

Priority MEDIUM 41

The JiangQie Official Website Mini Program WordPress plugin before 1.1.1 does not escape or validate the id GET parameter before using it in SQL statements, leading to SQL injection issues

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01608 Published 2021-09-06 Fixed in 1.1.1 CWE-89
TI-2025-21879 CVE-2025-30604 · GHSA-9vqg-fwfq-v3fr

WordPress JiangQie Official Website Mini Program plugin <= 1.8.2 - SQL Injection Vulnerability

Priority LOW 36

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in jiangqie JiangQie Official Website Mini Program jiangqie-official-website-mini-program allows Blind SQL Injection.This…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00454 Published 2025-03-24 No fix listed CWE-89
Open these records in search →