xjb REST API TO MiniProgram vulnerabilities

CVEs per yearBy the year they were published

1. 20242
2. 20251
3. 20261

Newest CVEs

• CVE-2026-3460

  REST API TO MiniProgram <= 5.1.2 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'userid' REST API Parameter

  xjb · REST API TO MiniProgram

  Medium5.3
• CVE-2025-28886

  WordPress REST API TO MiniProgram plugin <= 5.1.2 - Cross Site Request Forgery (CSRF) vulnerability

  xjb · REST API TO MiniProgram

  Medium4.3
• CVE-2024-8485

  REST API TO MiniProgram <= 4.7.1 - Unauthenticated Arbitrary User Email Update and Privilege Escalation via Account Takeover

  xjb · REST API TO MiniProgram

  Critical9.8
• CVE-2024-8484

  REST API TO MiniProgram <= 4.7.1 - Unauthenticated SQL Injection

  xjb · REST API TO MiniProgram

  High7.5