Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: jiangqie Clear all filters
TI-2025-21879 CVE-2025-30604 · GHSA-9vqg-fwfq-v3fr

WordPress JiangQie Official Website Mini Program plugin <= 1.8.2 - SQL Injection Vulnerability

Priority LOW 36

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in jiangqie JiangQie Official Website Mini Program jiangqie-official-website-mini-program allows Blind SQL Injection.This…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00454 Published 2025-03-24 No fix listed CWE-89
TI-2024-32907 CVE-2024-49314 · GHSA-x772-22wg-xfm9

WordPress JiangQie Free Mini Program plugin <= 2.5.2 - Arbitrary File Upload vulnerability

Priority MEDIUM 49

Unrestricted Upload of File with Dangerous Type vulnerability in jiangqie JiangQie Free Mini Program jiangqie-free-mini-program allows Upload a Web Shell to a Web Server.This issue affects JiangQie Free Mini Program: fro…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00511 Published 2024-10-17 No fix listed CWE-434
TI-2021-06595 CVE-2021-24303 · GHSA-pj62-vwgh-4fwm

JiangQie Official Website Mini Program < 1.1.1 - Authenticated SQL Injection

Priority MEDIUM 41

The JiangQie Official Website Mini Program WordPress plugin before 1.1.1 does not escape or validate the id GET parameter before using it in SQL statements, leading to SQL injection issues

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01608 Published 2021-09-06 Fixed in 1.1.1 CWE-89