xjb

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

xjb records in CISA KEV

No xjb vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-02980 CVE-2026-3460 · GHSA-xxxv-phx4-9pvx

Improper input validation in xjb REST API TO MiniProgram

LOW 30

The REST API TO MiniProgram plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.1.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00344 Published 2026-03-21 No fix listed CWE-20

TI-2025-20829 CVE-2025-28886 · GHSA-rhfm-q4h8-frxp

WordPress REST API TO MiniProgram plugin <= 5.1.2 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in xjb REST API TO MiniProgram rest-api-to-miniprogram allows Cross Site Request Forgery.This issue affects REST API TO MiniProgram: from n/a through <= 5.1.2.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00171 Published 2025-03-11 No fix listed CWE-352

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0