Read the docs

Minapper

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Minapper records in CISA KEV

No Minapper vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Rest Api To Miniprogram 1 record MEDIUM

Records

1 record in Rest Api To Miniprogram · all components

TI-2023-00522 CVE-2023-0551 · GHSA-fw39-qr37-3qq3

REST API TO MiniProgram <= 4.6.1 - Subscriber+ Attachment Deletion

Priority MEDIUM 58

The REST API TO MiniProgram WordPress plugin through 4.6.1 does not have authorisation and CSRF checks in an AJAX action, allowing ay authenticated users, such as subscriber to call and delete arbitrary attachments

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0028 Published 2023-08-16 No fix listed
Open these records in search →