Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
2 selected

1 record

Vendor: Minapper Component: Rest Api To Miniprogram Clear all filters
TI-2023-00522 CVE-2023-0551 · GHSA-fw39-qr37-3qq3

REST API TO MiniProgram <= 4.6.1 - Subscriber+ Attachment Deletion

Priority MEDIUM 58

The REST API TO MiniProgram WordPress plugin through 4.6.1 does not have authorisation and CSRF checks in an AJAX action, allowing ay authenticated users, such as subscriber to call and delete arbitrary attachments

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0028 Published 2023-08-16 No fix listed