Log in Start free

xjb

Products

ProductCVEsExploitedLatest
REST API TO MiniProgram4–Mar 21, 2026

Exploited and recent CVEs

  • CVE-2026-3460 Medium 5.3 REST API TO MiniProgram <= 5.1.2 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'userid' REST API Parameter 0.3%
  • CVE-2025-28886 Medium 4.3 WordPress REST API TO MiniProgram plugin <= 5.1.2 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2024-8485 Critical 9.8 REST API TO MiniProgram <= 4.7.1 - Unauthenticated Arbitrary User Email Update and Privilege Escalation via Account Takeover 0.6%
  • CVE-2024-8484 High 7.5 REST API TO MiniProgram <= 4.7.1 - Unauthenticated SQL Injection 3.8%