← Back

Minapper

minapper

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Rest Api To Miniprogram
rest_api_to_miniprogram
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-0551
1Minapper
1Rest Api To Miniprogram
Jun 17, 2026
Aug 16, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
The REST API TO MiniProgram WordPress plugin through 4.6.1 does not have authorisation and CSRF checks in an AJAX action, allowing ay authenticated users, such as subscriber to call and delete arbitrary attachments