xjb REST API TO MiniProgram

• CVE-2026-3460 Medium 5.3 REST API TO MiniProgram <= 5.1.2 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'userid' REST API Parameter 0.3%
• CVE-2025-28886 Medium 4.3 WordPress REST API TO MiniProgram plugin <= 5.1.2 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
• CVE-2024-8485 Critical 9.8 REST API TO MiniProgram <= 4.7.1 - Unauthenticated Arbitrary User Email Update and Privilege Escalation via Account Takeover 0.6%
• CVE-2024-8484 High 7.5 REST API TO MiniProgram <= 4.7.1 - Unauthenticated SQL Injection 3.8%