RA
Product
REST API TO MiniProgram
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 2Low 0
Watch
Add REST API TO MiniProgram to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-8485 | 9.8 | Sep 25 | REST API TO MiniProgram <= 4.7.1 - Unauthenticated Arbitrary User Email Update and Privilege Escalation via Account Takeover Affected: through 4.7.1 |
| CVE-2024-8484 | 7.5 | Sep 25 | REST API TO MiniProgram <= 4.7.1 - Unauthenticated SQL Injection Affected: through 4.7.1 |
| CVE-2026-3460 | 5.3 | Mar 21 | REST API TO MiniProgram <= 5.1.2 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'userid' REST API Parameter Affected: through 5.1.2 |
| CVE-2025-28886 | 4.3 | Mar 11 | WordPress REST API TO MiniProgram plugin <= 5.1.2 - Cross Site Request Forgery (CSRF) vulnerability Affected: through 5.1.2 |
Showing 4