Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Jianbo Component: Rest Api To Miniprogram Clear all filters
TI-2024-07867 CVE-2024-8485 · GHSA-563f-r8fh-rrgc

Authorization bypass in xjb REST API TO MiniProgram

Priority MEDIUM 50

The REST API TO MiniProgram plugin for WordPress is vulnerable to privilege escalation via account takeovr in all versions up to, and including, 4.7.1 via the updateUserInfo() due to missing validation on the 'openid' us…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0059 Published 2024-09-25 No fix listed CWE-639
TI-2024-07866 CVE-2024-8484 · GHSA-3xm5-r3mx-685g

REST API TO MiniProgram <= 4.7.1 - Unauthenticated SQL Injection

Priority MEDIUM 45

The REST API TO MiniProgram plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the /wp-json/watch-life-net/v1/comment/getcomments REST API endpoint in all versions up to, and including, 4.7.…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03761 Published 2024-09-25 No fix listed CWE-89