REST API TO MiniProgram vulnerabilities | LiveThreat CVE Feed

Product

REST API TO MiniProgram

by xjb · last CVE Mar 21, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Severity mix

Critical 1High 1Medium 2Low 0

Severity

Exploitation

Watch

Add REST API TO MiniProgram to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-3460	5.3	0%	Mar 21	REST API TO MiniProgram <= 5.1.2 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'userid' REST API Parameter Affected: through 5.1.2
CVE-2025-28886	4.3	0%	Mar 11	WordPress REST API TO MiniProgram plugin <= 5.1.2 - Cross Site Request Forgery (CSRF) vulnerability Affected: through 5.1.2