Skip to content
OpenAdvisories

Vendor

xjb

4 known vulnerabilities.

Products

REST API TO MiniProgram 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2024-8484 Public exploit

    REST API TO MiniProgram <= 4.7.1 - Unauthenticated SQL Injection

    The REST API TO MiniProgram plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the /wp-json/watch-life-net/v1/comment/getcomments REST API endpoint in all versions up to, and including, 4.7.1 due to insufficient escaping on the u…

    xjb REST API TO MiniProgram Web / CMS